• 🐸 Frog For Automatic Scan

• 🐶 Doge For Defense Evasion & Offensive Security

Doge-MemX

Golang implementation of Reflective load PE from memory

Only Supports x64 unmanaged PE

Supports Zip file ,auto unzip

Usage

• change black list https://github.com/timwhitez/Doge-MemX/blob/main/main.go#L326

blacklist := []string{
		//warning!! may cause panic!
		}

• change arguments https://github.com/timwhitez/Doge-MemX/blob/main/main.go#L381

tmpArgs := []string{"coffee"}

• new Thread or not https://github.com/timwhitez/Doge-MemX/blob/main/main.go#L386

//peLoader(&shellcode,"syscall")
peLoader(&shellcode,"createthread")

• go build

• run

Usage:
        Doge-MemX.exe mimikatz.exe
	Doge-MemX.exe mimikatz.zip
       

Limitations

Reflect-pe only works for x64 dynamic executables.

Reflect-pe only works for x64 unmanaged PE

It's not stable.

References

https://github.com/frkngksl/Huan

https://github.com/ayoul3/reflect-pe

https://github.com/Binject/debug

https://github.com/Binject/universal

🚀 Star Trend