Skip to content

Commit 409ac99

Browse files
committed
Updated tool description
1 parent e598168 commit 409ac99

1 file changed

Lines changed: 1 addition & 1 deletion

File tree

README.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
# Windows shellcode emulation tool based upon [unicorn framework](https://www.unicorn-engine.org/).
22

3-
ShellcodeEmulator emulates shellcode with the help of windbg process memory dumps. You can provide process memory dump as a input with shellcode to analyze, it will emulate as much as the userland layer just above kernel calls. You can add your custom syscall handlers or any handlers in between the API calls used by shellcode and the kernel layer.
3+
ShellcodeEmulator emulates Windows shellcode with the help of windbg process memory dumps. You can provide shellcode to analyze with any Windows process dump image and it will emulate as much as the userland code using the provided dump image. You can add your custom syscall handlers or any handlers in between the API calls used by shellcode and the kernel layer. This can provide full view of the user stack and also let you handle shellcode that are bypassing existing shellcode harnesses by calling syscalls directly.
44

55
## Installation
66

0 commit comments

Comments
 (0)