sheep-wolf – Exploit MD5 Collisions For Malware Detection
sheep-wolf is a tool to help you Exploit MD5 Collisions in software, specially malware samples which are commonly detected using MD5 hash signatures. sheep-wolf - Exploit MD5 Collisions For Malware Detectionand then a malicious one (Wolf) that have the same MD5 hash. Please use this code to test if the security products in your reach use MD5 internally to fingerprint binaries and share your results by issuing a pull request updating the contents of results/! Dependencies 32-bit Windows (virtual) machine (64-bit breaks stuff) Visual Studio 2012 to compile the projects (Express will do) Fastcoll for collisions Optional: Cygwin+MinGW to compile Evilize How does it work? shepherd.bat executes shepherd.exe with the user supplied command line arguments shepher.exe generates a header file (sc.h) that contains the encrypted shellcode, the password and the CRC of the plain shellcode shepherd.bat executes the build process of sheep.exe sheep.exe is built with sc.hincluded by Visual Studio shephe...