Skip to content

A tool that dynamically modifies syswh3 static features against AV/EDR static detection

Notifications You must be signed in to change notification settings

XiaoyaoJSec/SysWh3_Randomized

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

8 Commits
 
 
 
 

Repository files navigation

SysWh3_Randomized


Author: https://github.com/xiaoyaoxianj

This project is based on SysWispers-FuntionRandomizer , which adds variable obfuscation on top of the original, and can customize the length of the variable.

I recommend deleting unnecessary content from the Syswh3-generated files before using the script. Use the following tips to improve your efficiency.

There are some variables in the project that cannot be easily replaced and can be implemented directly using renaming

Tips:

Here are some useful regular expressions to help us use in VSstudio(Ctrl + H)

Delete comments in all // modes

^[\t]*//[^\n]*\n

Delete all empty lines

^(?([^\r\n])\s)*\r?$\r?\n

Delete comments from all asm files

;.* ---> \n

Usage

python Syswh3_Randomized.py -l 6 xiaoyaoj.c xiaoyaoj.asm xiaoyaoj.h

Help

About

A tool that dynamically modifies syswh3 static features against AV/EDR static detection

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages