lucabongiorni / eli.decode

Just a tool to decode obfuscated shellcodes using the unicorn engine

Eli.Decode

Just a tool to decode obfuscated shellcodes using the unicorn engine by DeveloppSoft, original repo here.

Please note

• You may have problems or wrong decoded shellcodes...
• You need the unicorn engine AND the capstone engine (with the python bindings...).

Supported archs

• x86_32
• x86_64

Todo

• x86_16
• arm
• arm64
• mips_3
• mips_32
• mips_32r6
• mips_64

Please note this is as easy as added / patching values in the "decoders" dictionnary, so... I just need to google it (let me time...). Finally, please note that new architectures might be added if they are supported by the unicorn engine AND the capstone engine.

Try:

python Eli.Decode/decoder.py --help

Credits

This code is based on unicorn-decoder. Finally, I want to thanks everybody which gave me time there.

Don't forget to contribute !!