itsMe Posted June 10, 2020 Share Posted June 10, 2020 This is the hidden content, please Sign In or Sign Up amber is a reflective PE packer for bypassing security products and mitigations. It can pack regularly compiled PE files into reflective payloads that can load and execute itself like a shellcode. It enables stealthy in-memory payload deployment that can be used to bypass anti-virus, firewall, IDS, IPS products and application white-listing mitigations. If you want to learn more about the packing methodology used inside amber check out below. New Features x64 support added ! Support for MacOS and Windows (Currently supporting all major platforms) Assembly stubs rewritten External dependencies reduced to two C++ stubs converted to go All project converted into a go package This is the hidden content, please Sign In or Sign Up Link to comment Share on other sites More sharing options...
Recommended Posts