hub / github.com/TunnelGRE/Percino
github.com/TunnelGRE/Percino @main
Chat with this repo
15 symbols
32 edges
2 files
0 documented · 0%
What it actually does AI analysis from the code graph — generated when you open this
loading…
README
Percino
Evasive Golang Loader
Percino is a Golang loader that execute shellcode utilizing the process hollowing technique with anti-sandbox and anti-analysis measures. The shellcode is encrypted with the Triple DES (3DES) encryption algorithm.
Full EDR bypass with any C2 Framework. Tested with Cobalt Strike against MDE EDR.
Key Features: - 3DES Encryption - Sandbox Evasion - Analysis Evasion - Execution delay - Process Hollowing
TIP: I recommended to sign the binary with CS
CS:
MSF:
Core symbols most depended-on inside this repo
formatShellcodecalled by 3
3DESEncryptor.go
generateRandomBytes
called by 2
3DESEncryptor.go
zzzh
called by 2
main.go
encryptDES3
called by 1
3DESEncryptor.go
pad
called by 1
3DESEncryptor.go
IsProcessRunning
called by 1
main.go
CheckSandbox
called by 1
main.go
decryptDES3
called by 1
main.go
Shape
Languages
Go100%
Modules by API surface
main.go9 symbols
3DESEncryptor.go6 symbols
For agents
$ claude mcp add Percino \
-- python -m otcore.mcp_server <graph>