/NovaOutCast

NOC is an Integration Bypasser, Change PoC Binary to quirks of working with the LLVM.

Primary LanguageCOtherNOASSERTION

NovaOutCast | N.O.C

                     ______
                  .-"      "-.
                 /            \
                |  P X x C S   |
                |,  .-.  .-.  ,|
                | )(__/  \__)( |
                |/     /\     \|
      (@_       (_     ^^     _)
 _     ) \_______\__|IIIIII|__/__________________________
(_)@8@8{}<________|-\IIIIII/-|===========================>
       )_/        \          /
      (@           `--------`  CappaX - pxcs - bypassAV

Blog posts

The implementation is rather complex and this domain in software development is rarely documented in layman's terms. This is why there are blog posts which detail every design choice and go over the quirks of working with the LLVM API.

Build

docker build . -t novaoutcast
docker run -v ~/dev/scrt/novaoutcast:/home/toto -it novaoutcast bash #adapt ~/dev/scrt/novaoutcast to the path where you cloned novaoutcast
sudo pacman -Syu
mkdir CMakeBuild && cd CMakeBuild
cmake ..
make -j 2
./novaoutcast.bin --help

Usage

For simple programs, this is as easy as:

novaoutcast.bin test/strings_simplest.c --strings=true --

However, you should know that you're using a compiler frontend, which can only work well if you give it the path to ALL the includes required to build your project. As an example, test/string_simplest.c includes headers from the WinSDK, and the script run_example.sh shows how to handle such scenarios.

Common errors

CommandLine Error: Option 'non-global-value-max-name-size' registered more than once! LLVM ERROR: inconsistency in registered CommandLine options

In case you encounter this error, please use CMakeLists_archlinux.txt instead of CMakeLists.txt and it should go away.

Contributors

  • Thanks @gituser5555 for the bug fixes.
    • AVCLEARNERS for source codes