In this section we will learn how to obfuscate our shellcode make it more hard to be detected.

Why we should obfuscate our shellcode?

• Evading Static Detection.
• Make it hard for analyst to reverse engineer.

IP Fuscation

What is IP Fusction?

• IP Fuscation: is a tachnique where the shellcode is converted to bytes of IPv4 or IPv6 strings

IPv4 Fuscation

In this part we will understand how IPv4 fuscation works and how to implement it as a C code.

First How it works?

• Sence the IPv4 consists of 4 octets then the IPv4 Fuscation uses 4 bytes to generate a single IP Address where each byte will represent a singe octet so at the end of the 4 bytes we will get a single IP Address containing a part of our shellcode.

Now let’s try to implement this as a C Code and it’s so simple.

IPv4 Fuscation Function.