Perfidious - Make PE Backdooring Great Again

Explore the innovative PErfidious tool in this conference talk from the Hack In The Box Security Conference. Dive into the world of PE executable backdooring as Shreyans Doshi demonstrates how this Python3 tool transforms malicious shellcode and injects it into benign PE files. Learn about the tool's ability to evade detection by recalculating and adjusting the .text section, making traditional code injection traces disappear. Discover PErfidious' dual functionality as both a tool and a Python3 library for PE file manipulation, offering a modern alternative to the pefile package. Gain insights into PE32/PE32+/DLL file structures and their potential vulnerabilities. Presented by Shreyans Devendra Doshi, a Cybersecurity Graduate Student with experience in malware research and endpoint detection system bypassing techniques.

#HITBGSEC COMMSEC: Perfidious: Make PE Backdooring Great Again! - Shreyans Doshi