Shellter Pro v3.3 -Released-

Dear friends,

Latest version of Shellter Pro is now available to download.

In this release we improved the randomization engine by incorporating support for the RNG provided through the MS Crypto API, both legacy and CNG.
Support for the standard ‘rand()’ function of C library still remains for reliability reasons, but it will be only used as the last resort in case a crypto function fails. Continue reading Shellter Pro v3.3 -Released-

Shellter Pro – Obfuscation Improvements

Howdy,

One of the most important features of Shellter, is the ability to obfuscate its stubs by mixing the effective instructions with other junk instructions and/or generate a specific output with variable instructions. This has been improved a lot in Shellter Pro already, but we wanted to make things even better.

Obfuscating the code by itself doesn’t really mean anything. The way the obfuscation works is the key part.
In a few words we want the obfuscated code to look as ‘normal’ as possible. This can be achieved by randomly using a variety of instructions of variable length.
The number of instructions used each time should also be randomized. This helps against not just in terms of finding patterns to target from the AV perspective, but also to have variable ranges between instructions that could be otherwise grouped together by an AV signature in a specific code block.

Continue reading Shellter Pro – Obfuscation Improvements

Shellter Pro v3.2 -Released-

Dear friends,

Latest version of Shellter Pro v3.2 is now available to download by its rightful license owners.

In this release we addressed a bug in the payload injection engine that under certain circumstances would result in a partially wrong injection of the payload.

You can read more about this here.

Cheers,
kyREcon

AV Evasion Artware