Hades

Custom Syscalld Hints, GetModuleHandle and GetProcessAddres for evasion.

Usage

import (
  "crypto/sha1"
  "encoding/hex"
   hades "github.com/ASP4RUX/Hades/pkg/Hades"
)

func hash(f string) string {
	s := []byte(f)
	key := []byte{0xde, 0xad, 0xbe, 0xef}
	for i := 0; i < len(s); i++ {
		s[i] ^= key[i%len(key)]
	}
	sha := sha1.New()
	sha.Write(s)
	return hex.EncodeToString(sha.Sum(nil))[:16]
}

func main() {
	newWhisper := hades.Whisper(hash)

	NtAllocateVirtualMemory, err := newWhisper.GetSysid("1021ddc2cb8b096b")
	if err != nil {
		panic(err)
	}
	println(NtAllocateVirtualMemory.Id)
}