When you're going to use Veil as your payload obfuscation
framework, make sure to check out Ordnance to also be able to
generate and encrypt shellcode,
which allows you to also filter known bad characters
to use directly in the same tool.
If you're using Python as your main means of execution, check out Pyherion.
This encryption implementation is heavily inspired by Hyperion
PE‑encrypter by Null‑Security, hence the name similarities,
which also looks at changing the obfuscation decryption stops by encrypting the
whole payload with AES and a random single character key,
which is brute forced on runtime for even more randomized end
results generated by this amazing tool.
If you're looking for more information on how to set up PyInstaller to
disable the DEP opt in, take a look at the following link for a detailed
explanation on how to recompile it for yourself.
Lastly,
I would like to give you some information on the techniques
used by this tool to obfuscate the payloads.
Lastly,
I would like to give you some information about how to create your own payload.
You can use this information to further improve your knowledge on
how these tools function and make adjustments so your payloads are
truly as unique as you are yourself.
Thank you for watching Defense Evasion with Veil on Pluralsight, and I
hope you join me and the other authors to learn about more tools to add
to your red team arsenal in the future.