Backpack icon indicating copy to clipboard operation
Backpack copied to clipboard

Golang packer that use process hollowing

Backpack

drawing

Backpack is a packer that use process hollowing to hide your payload writen in Golang. This is based on the work of abdullah2993 (https://github.com/abdullah2993/go-runpe)

Usage

Cypher your PE with AES :

cd PEtoAES
PEtoAES> go run pe2AES.go -p "path to the PE to pack" -k "32 char key"
[+] Done !

It should create two file, key.txt and pe.txt

Compile the packer with your AES file :

go build main.go

Then, just execute your PE and enjoy.

drawing

Contributing

Pull requests are welcome.