mandiant / mandiant/VM-Packages
Package proposal: runsc.vm
Nobody has claimed this yet.
- Dominant language
- PowerShell
- Stars
- 246
- Forks
- 98
- Avg merge
- 9h 30m
- Merged PRs (30d)
- 7
Description
### Package Name
runsc
### Tool Name
runsc32.exe and runsc64.exe
### Package type
ZIP_EXE
### Tool's version number
1.0.0
### Category
Utilities
### Tool's authors
Evan H. Dygert
### Tool's description
Makes running shellcode in a debugger easy.
### Download URL
https://github.com/edygert/runsc/releases/download/V1.0.0/runsc.zip
### Download SHA256 Hash
b50e03866c4830290384905c185b2ee876463f3dea15c8c751f0d12cf26fe7b5
### Why is this tool a good addition?
Running shellcode in a debugger can be tricky. runsc32/runsc64 starts the shellcode in a suspended state, giving the analyst time to attach to the process with a debugger and then resume the shellcode.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
No files, tests, or entry points are named in the proposal. Review the repository's existing package conventions and compare them with the runsc32.exe and runsc64.exe download URL and SHA256 hash; done means the runsc package is added with the supplied metadata and both executables are available from the release archive.
Written by the indexing model from the issue text.
Assessment
- Domain
- reverse-engineering, tooling
- Issue type
- Feature
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100