Cymothoa is a backdooring tool, that inject backdoor's shellcode directly into running applications. Stealth and lightweight...
Features
- Runtime backdoor inject
- Covert processes
License
GNU General Public License version 2.0 (GPLv2)Follow cymothoa
Other Useful Business Software
DriveStrike: Remote Wipe | Data Breach Protection
DriveStrike protects devices and data in the event of loss, theft, or use in remote locations. Remotely locate, lock, and wipe devices you manage to prevent data compromise. DriveStrike prevents data breaches to ensure confidentiality, compliance, and a competitive edge.
Rate This Project
Login To Rate This Project
User Reviews
-
Could you tell me why the new INST_POINTER is ptr + 2 instead of ptr? <snip> 203 ptr = search_lib_region(pid, args.lib_name, MEM_EXEC); 204 205 printf("[+] injecting code into 0x%.8x\n", ptr); 206 207 reg.INST_POINTER = ptr + 2; <---- Curious 208 printf("[+] copy general purpose registers\n"); </snip> Looking forward to your reply!