taibeihacker
Moderator
无效是一种反向转向工具，该工具应用了一种用nullbytes覆盖截面标题的技术。
installgit克隆https://github.com/matheuzsecurity/nullsection
CD无征
gcc nullsection.c -o nullsection
./nullsection AdvantageWhen running nullsection on any ELF, it could be .ko rootkit, after that if you use Ghidra/IDA to parse ELF functions, nothing will appear no function to parse in the decompiler for example, even if you run readelf -S/path /to/elf the following message will appear 'There are no sections in this file.'
充分利用该工具！
Notewe对此工具造成的任何损坏不承担任何责任，而是仅出于教育目的而智能地使用该工具。
installgit克隆https://github.com/matheuzsecurity/nullsection
CD无征
gcc nullsection.c -o nullsection
./nullsection AdvantageWhen running nullsection on any ELF, it could be .ko rootkit, after that if you use Ghidra/IDA to parse ELF functions, nothing will appear no function to parse in the decompiler for example, even if you run readelf -S/path /to/elf the following message will appear 'There are no sections in this file.'
充分利用该工具！
Notewe对此工具造成的任何损坏不承担任何责任，而是仅出于教育目的而智能地使用该工具。