HERCULES is a customizable payload generator that can bypass anti-virus software.
HackingVision installation tips: HERCULES is programmed in Go if your using Go for the first time you will need to set a GOPATH you can do this by using the following commands.
export GOPATH=$HOME/go export PATH=$PATH:$GOROOT/bin:$GOPATH/bin
You can add default GOPATH to ~/.bashrc to make GOPATH permanent.
mkdir ~/.go echo "GOPATH=$HOME/.go" >> ~/.bashrc echo "export GOPATH" >> ~/.bashrc echo "PATH=\$PATH:\$GOPATH/bin # Add GOPATH/bin to PATH for scripting" >> ~/.bashrc source ~/.bashrc
$ git clone https://github.com/EgeBalci/HERCULES.git
$ cd HERCULES
go get github.com/fatih/color
go run Setup.go
|Ubuntu||16.04 / 15.10|
|Kali linux||Rolling / Sana|
go get github.com/fatih/ go run Setup.go
WARNING: Don’t change the location of the HERCULES folder.
Persistence : Persistence function adds the running binary to windows start-up registry (CurrentVersion/Run) for continuous access. Migration : This function triggers a loop that tries to migrate to a remote process until it is successfully migrated.
#WHAT IS UPX ?
UPX (Ultimate Packer for Executables) is a free and open source executable packer supporting a number of file formats from different operating systems. UPX simply takes the binary file and compresses it, packed binary unpack(decompress) itself at runtime to memory.
#WHAT IS “AV EVASION SCORE” ?
AV Evasion Score is a scale(1/10) for determining the effectiveness of the payloads anti virus bypassing capabilities, 1 represents low possibility to pass AV softwares. Using special functions and packing the payloads with upx decreases the AV Evasion Score.
- Binary infector
- Bypass AV functon
- AES payload encryption
- OSX support