In the previous lesson, they managed to implement Heaven's Gate, but it is important to note that
Heaven's Gate Supply is now widely known and this bi-courtney can be detected by antivirus.
So we need to increase to do so in this project.
Now you are going to encrypt this code.
And so to do that, I've written some script here.
We need to convert this binary string into by roll bytes.
Then once you get there base, you can use an Alias two to create the encrypted channel.
So to do that, I've already created the second project for you.
So again, download your second project, which is this one cross injection machine to encrypt it.
Next, open this new project here.
OK, so this new version of the project contains the decryption function, I read this decryption function.
And this commission, I have also edited the decryption function calls is over here.
This is a new line.
In his her.
No, and also added the new encrypted chocolate for x64 function.
And also this line here added in to calculate the length of the Shargel and also the encryption key,
this line and also this line.
So how did we get this chocolate together chocolate?
We need to encrypt it using.
And he he has encrypted.
If you go to the for the heaven's gate, you have the increase, which we have used before.
But this increase only access files, right?
And if you remember, you need to specify the volume as barometer before hitting.
But this one we don't have to follow.
Now, if you open an encrypted version of the shellcode.
This one year, we only have the binary string, you don't have any sense of fun.
So before we can use this incubator, yes, we need to convert these binary string into funds, then
only we can use can is not too been converting this binary string and this vanishing into fast.
I written a Python script here.
So let's do that now.
Open this Python script here.
And then here.
This your vinyl string into this family as a barometer here, so let's do this now.
Open your OK.
You take the first one.
This is Eric I-64.
Do not copy the semicolon and obey, right, just copy the varnish string, say.
Come here and P.S. here.
Delete this first PC, hit the Beast to convert this into binary stream and not history, so it just
will be in every line.
OK, so now let's save this and rainy.
So we need to change to this directory.
So go to your new project in heaven's gate here.
Copy this part.
And make sure you change the gear to screen first change to the Category three before you do anything.
So in here you have this function.
So let's press into.
And rhetorically, health and Richelle, call and excessive and execute ICC for not being.
All right, now, we do the same thing for the second one, which is this the excessive all function?
Crazy here.
Make sure you put a semicolon in back here now, insert B for every line.
OK.
Save it runs again by this time.
And we are going to output it to a different funny, I said before we turn down the into.
So now you have two files which has been converted into binary files now.
And Chris, can you work on this binary files?
So now we're going to do that.
OK, so you just run in here, yes.
And then the balmy turkey is a secular.
And then we know how to execute a city for.
Not a yes.
All right.
If it is ending this time you do it on the x64 from, we shouldn't be able to access it for function.
Yes, good.
Now we have to go.
We have this in.
This next thing is a copy.
This encrypted payload he was into the I was.
Right.
So let's do the first one first openly thing, look.
And you have our here, which is, I mean to.
So we just copy this hard copy and then.
Come, come back here.
And then you see say here.
Replaces busy here.
All right.
And then do the same thing for the ex-City for key.
Right.
Yes, 84 key.
He's just key.
Copy this key.
And replace this, replace this, OK, now once you've done that and do the same thing for x64 function.
So open your see for function for this one.
Yes.
To open this in, OK?
And then copy this payroll, this one copy in two weeks has 64.
Function, Shockley.
To replace this and then do the same thing for the key, which is this.
Is and replace this before punching.
That's that's all you need to do.
All right.
So when you sting runs, he's going to decrypt, he's going to call the decree.
Yes, he would decrypting the scooter.
He would decree any encrypted.
He encrypted the.
A city for chocolate and an overnight need using this key here and then sending over here extremely
active for handcrafted function chocolate and over into the original location.
So this is how you describe the rest.
It's all the same.
So now let's build this.
So we're going to go back up to the bar a tree and combine.
The check is done been to make sure that that little bit program.
Yes, he confirmed that it'll be so.
We run Microsoft Paint.
The 64 bit version of Microsoft Bin.
Riches is one.
So it's.
Into.
And I can hear the beep in.
Now here is your pop up message box, confirm this coming.
This is energy coming from Microsoft Paint.
We use our process.
We drank this to five, you know, and train for dragging over to the message box and release and that
anything didn't make us happy.
In memory, scroll down and the protection column to the readable executable.
His one on one.
And you see our show.
OK, so have this, and in with this encryption of the Heaven's Gate, it would be able to bypass the
antivirus scanners.
OK, so that's all for this video.
Thank you for watching.