DARK • BYPASS

#!/usr/bin/env python3 import sys import shutil from elftools.elf.elffile import ELFFile from Crypto.Cipher import AES from Crypto.Util.Padding import pad, unpad # 16/24/32 byte key (must be fixed size) KEY = b"1234567890abcdef" IV = b"abcdef1234567890" def list_sections(path): with open(path, "rb") as f: elf = ELFFile(f) print("\n[+] Sections:\n") for sec in elf.iter_sections(): print(f"{sec.name:<20} size={sec['sh_size']}") def aes_encrypt(data): cipher = AES.new(KEY, AES.MODE_CBC, IV) return cipher.encrypt(pad(data, 16)) def aes_decrypt(data): cipher = AES.new(KEY, AES.MODE_CBC, IV) return unpad(cipher.decrypt(data), 16) def process_section(path, section_name, mode="enc"): backup = path + ".bak" shutil.copy2(path, backup) print(f"[+] Backup created: {backup}") with open(path, "r+b") as f: elf = ELFFile(f) target = None for sec in elf.iter_sections(): if sec.name == section_name: target = sec break if not target: print("[-] Section not found") return offset = target["sh_offset"] size = target["sh_size"] print(f"[+] Section: {section_name}") print(f"[+] Offset : {offset}") print(f"[+] Size : {size}") f.seek(offset) data = f.read(size) if mode == "enc": out = aes_encrypt(data) else: out = aes_decrypt(data) # WARNING: size mismatch possible if padding changes f.seek(offset) f.write(out[:size]) print(f"[+] {mode.upper()} done") def usage(): print(""" Usage: List: python3 elf_aes_enc.py list lib.so Encrypt: python3 elf_aes_enc.py enc lib.so .rodata Decrypt: python3 elf_aes_enc.py dec lib.so .rodata """) def main(): if len(sys.argv) < 3: usage() return cmd = sys.argv[1] if cmd == "list": list_sections(sys.argv[2]) elif cmd in ["enc", "dec"]: if len(sys.argv) != 4: usage() return process_section(sys.argv[2], sys.argv[3], cmd) else: usage() if name == "main": main()

• One time - ₹700 • Monthly - ₹1.5 • Season - 2k