Mmastodon TechnologyCybersecurity first seen 18 d ago, last 18 d ago, peak #10
New shellcode loader tool abuses Visual Studio's TextTransform.exe
Original: Payload builder that generates shellcode loaders executed via TextTransform.exe and .tt files. https:// github.com/whoki
A security researcher has released an open-source payload builder that generates shellcode loaders executed through TextTransform.exe and .tt template files, a living-off-the-land technique that abuses a trusted Visual Studio component to run malicious code. The tool is circulating among red teamers and penetration testers, raising concerns it could also be adopted by attackers to evade detection.
Why now: Security practitioners are discussing a new open-source tool that weaponizes a legitimate developer utility for evasion.
TextTransform.exewhokilleddbGitHubVisual Studio
Evidence
- Payload builder that generates shellcode loaders executed via TextTransform.exe and .tt files. https:// github.com/whokilleddb/TTs # infosec # cybersecurity # redteam # pentest · r1cksec@infosec.exchange · 1
API: https://socialmediatrends-api.osmike.com/v1/trends/3612489