External/APTs-Adversary-Simulation
1
0
Fork 0
mirror of https://github.com/S3N4T0R-0X0/APTs-Adversary-Simulation.git synced 2026-08-04 09:41:40 +02:00
Code Issues Packages Projects Releases Wiki Activity

Update README.md

Browse Source
This commit is contained in:
S3N4T0R
2024-09-12 08:06:49 -04:00
committed by GitHub
parent d3275725d4
commit fcc76d15da
1 changed files with 11 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Chinese APT/Mustang Panda/README.md
+11
View File
@@ -84,5 +84,16 @@ To create a payload similar to the ToneShell backdoor and incorporate the functi
3. 64-bit Compatibility: Ensure that the code is suitable for 64-bit Windows systems. 3. 64-bit Compatibility: Ensure that the code is suitable for 64-bit Windows systems.
![Screenshot from 2024-09-12 07-57-52](https://github.com/user-attachments/assets/61290a5f-ce8a-4878-b6a7-8d8e6131f558)
ToneShell Backdoor initializes data and dynamically allocates memory for a function pointer (PROPENUMPROCEXW), using it to enumerate window properties. It includes functions for dummy data handling, debug message output, and simulating file archiving with a password (without actual implementation). Key operations include:
1.Data Handling: Obtains and processes dummy data.
2.Memory Management: Allocates memory for executing function pointers.
3.Window Enumeration: Uses EnumPropsExW() to list window properties.
4.Debugging: Outputs static messages for diagnostics.
manual compile: x86_64-w64-mingw32-gcc -o ToneShellBackdoor.exe ToneShellBackdoor.c -lwinhttp