From 45e053f07ada428c7085abac7664da5fe8d0fb53 Mon Sep 17 00:00:00 2001 From: skyper <5938498+SkyperTHC@users.noreply.github.com> Date: Tue, 13 Aug 2024 21:43:45 +0100 Subject: [PATCH] Update README.md --- README.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/README.md b/README.md index b909408..7eefcf0 100644 --- a/README.md +++ b/README.md @@ -1875,13 +1875,13 @@ BIN="mybin" upx -qqq /bin/id -o "${BIN}" ``` -Then destroy the [UPX header](https://github.com/upx/upx/blob/devel/src/stub/src/include/header.S) and 2nd ELF header to fool the Anit-Virus: +Cleanse the [UPX header](https://github.com/upx/upx/blob/devel/src/stub/src/include/header.S) and 2nd ELF header to fool the Anit-Virus: ```shell perl -i -0777 -pe 's/^(.{64})(.{0,256})UPX!.{4}/$1$2\0\0\0\0\0\0\0\0/s' "${BIN}" perl -i -0777 -pe 's/^(.{64})(.{0,256})\x7fELF/$1$2\0\0\0\0/s' "${BIN}" ``` -Optionally destroy traces of UPX: +Optionally cleanse signatures and traces of UPX: ```shell perl -i -0777 -pe 's/UPX!/\0\0\0\0/sg' "${BIN}" cat "${BIN}" \ @@ -1891,7 +1891,7 @@ cat "${BIN}.tmpupx" >"${BIN}" rm -f "${BIN}.tmpupx" ``` -Verify that is can not be unpacked: +Verify that binary can not be unpacked: ```shell upx -d "${BIN}" # Should fail with 'not packed by UPX' ```