Hello.
In the last lesson, we already decrypted the encryption and we done the payload into a new file called
as decrypted bin.
So going down this fujiko shackle, run it in this lesson, I'm going to show you how to use Shankle,
run it to Deseo shellcode.
So now, before we can use Sherko Runner, you have to open this in the hex editor and export proper
file, properly formatted for running in a C program.
So to do that, we use the Hex editor.
So good iFLY.
Go to the Hex editor and fire up your hex editor called SD and then you drag the decrypted binary into
here.
So now we had to export and this has been properly formatted code.
So we select all these and then we click on file and then you click on the spot, see, and then you
dump in for the show, click wrong on this project folder, be using and call it as, decrypt it and
see see extension click and see.
Now we can close this.
And you can see this, a new file here.
So we need to open this file and copy the contents.
So we open in the notepad plus plus.
And then notice it has properly formatted everything for us with to zero X prefixing frame for every
of the hex values.
And then he also nicely tells us the size of this area, which is two hundred eighty eight and vice
meaning at two hundred hex bytes here.
So all we need to do is to copy all these practical P and then open the chocolate and a sip.
And then come down here.
And peace.
Busy here.
So now we have to rename this So we come shellcode.
So we just copy the name beer.
And.
Renamed this.
Now we can delete this one, this is just a sample.
We don't need it anymore.
So this program, Kaushal Corunna, is for testing Choco's.
So any time you want to test a show, we hear them from any malware.
You can always use these tiny you use hex editor to do a her properly formatted uri and then put the
area inside this program.
And now we can save it.
So make sure you you put to it here for the length of the Shankle to it.
And then after that use, it is going to allocate memory and print the parents, address Hesperus and
look at the memory.
And then you copy Chalco to the Lakota memory changes permission to be executable, readable.
And then you ask you to press, enter, and then you run it using Coutre.
So now we will compile this using the compile script here.
So the computer screen will take Nishikawa, CBP and create chappo file.
And you open this thing up and you can see here Chuco running setpiece input and the output is currently
under Iyesi.
So to compile it, we opened a new X sixty four native to terminal.
And then we know we get to this location so we copy this Parkhurst and then see this base right click
to paste it into.
And now we can compiled by a Collini compiled script get into.
So now you generate our Churko around the EIC.
And now we can test how show by running this file.
So just go around the EIC hit enter again and how shellcode has executed it.
And he has run the disharmonious was designed to run.
And that's why you see the nonpaid popping up here.
So this is how you can use the Sherko run source code.
So that's all for this video.
Thank you for watching.