From a2f52540ca955a8105648bf9161351d47f5b43ed Mon Sep 17 00:00:00 2001 From: CPunch Date: Sat, 3 Sep 2022 00:51:43 -0500 Subject: [PATCH] Updated Obfuscation methods (markdown) --- Obfuscation-methods.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Obfuscation-methods.md b/Obfuscation-methods.md index ac927f1..048a82b 100644 --- a/Obfuscation-methods.md +++ b/Obfuscation-methods.md @@ -6,4 +6,4 @@ Laika has a tiny VM embedded in the library (`/lib/` && `/lib/core/`). This most ## Importing WinAPI during runtime (windows only) -This method is extremely common and most AVs have smartened up to it. Basically instead of having WinAPI in our IAT (Import Address Table) of the executable, we load the commonly flagged functions (things like CreatePseudoConsole, ShellExecuteA, etc.) during runtime. For detail on adding another API to be loaded during runtime, please refer to the [contributing guide](https://github.com/CPunch/Laika/blob/main/CONTRIBUTING.md#bot-windows-api-imports-obfuscation). \ No newline at end of file +This method is extremely common and most AVs have smartened up to it. Basically instead of having WinAPI in our IAT (Import Address Table) of the executable, we load the commonly flagged functions (things like CreatePseudoConsole, ShellExecuteA, etc.) during runtime. For details on adding another API to be loaded during runtime, please refer to the [contributing guide](https://github.com/CPunch/Laika/blob/main/CONTRIBUTING.md#bot-windows-api-imports-obfuscation). \ No newline at end of file