Shellcode coding and decoding deformation method

A codec and encryption algorithm technology, applied in the field of shellcode codec deformation, can solve the problems of traffic hijacking analysis, easy to be reversed or static analysis, unfavorable information hiding, etc., to prevent hijacking analysis, efficient vulnerability detection and utilization, execution vulnerability detection The effect of using

Inactive Publication Date: 2018-07-10
NO 30 INST OF CHINA ELECTRONIC TECH GRP CORP
View PDF6 Cites 4 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

Usually, the shellcode written in C language or other languages ​​has obvious characteristics, especially when it is transmitted through the network, it is not conducive to information hiding, and it is easy to be analyzed by traffic hijacking, and it is also easy to be reversed or statically analyzed.

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Shellcode coding and decoding deformation method
  • Shellcode coding and decoding deformation method
  • Shellcode coding and decoding deformation method

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0018] A shellcode encoding and decoding deformation method, such as figure 1 shown, including the following steps:

[0019] Step 1. Use a C language compiler or other compilation tools to write a shellcode program and extract the shellcode.

[0020] Step 2: Use the random number generator to generate a 2-byte short random integer G.

[0021] Because in step three, the random integer needs to be transformed to obtain the encryption key. There are many ways to generate random integers, as long as the random numbers generated each time meet the length requirements.

[0022] Another way to calculate a random number is to use the current timestamp to calculate its hash value, and take the ASCII code value of some specific bits to generate a new random number G. The pseudocode for computing G is shown below.

[0023] String strTimeStampHash = Calc_SHA1((int)time(0));

[0024] String strGenRandNum = strTimeStampHash[0:1]+strTimeStampHash[7:8];

[0025] Int intGenRand = StringT...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

PUM

No PUM Login to View More

Abstract

The invention discloses a shellcode coding and decoding deformation method. A random integer G is generated by a random number generator; the random integer G is calculated via an encryption algorithmto obtain an encryption key; the encryption key is used to encrypt shellcode to obtain a shellcode ciphertext C; network protocols are established according to network protocol characteristics, and the random integer G and the ciphertext C are filled into parts without loads of the network protocols and transmitted via the network; the network data is filtered in the reception end, and the randominteger G and the ciphertext C are extracted; the random integer G is calculated via the encryption algorithm to obtain a decryption key; and the decryption key is used to decrypt the ciphertext C toobtain a shellcode plaintext. The coding and decoding deformation method can be used to hide load information effectively, prevent hijack analysis of the network flow, and utilize vulnerability detection in high efficiency.

Description

technical field [0001] The invention relates to a shellcode encoding and decoding deformation method. Background technique [0002] Shellcode is a piece of binary code used to send exploits to the server for vulnerability detection and system security testing. Usually, the shellcode written in C language or other languages ​​has obvious characteristics, especially when it is transmitted through the network, it is not conducive to information hiding, and it is easy to be analyzed by traffic hijacking, and it is also easy to be reversed or statically analyzed. Contents of the invention [0003] In order to overcome the above-mentioned shortcomings of the prior art, the present invention provides a shellcode codec deformation method. [0004] The technical scheme that the present invention adopts to solve the technical problem is: a kind of shellcode encoding and decoding deformation method, comprises the following steps: [0005] Step 1, using a random number generator to ...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

Application Information

Patent Timeline
no application Login to View More
Patent Type & AuthorityApplications(China)
IPC IPC(8): H04L29/06G06F21/57
CPCG06F21/577G06F2221/034H04L63/1433H04L63/1466
Inventor姬国珍饶志宏
OwnerNO 30 INST OF CHINA ELECTRONIC TECH GRP CORP