nul0x4c / terraldr

A Payload Loader Designed With Advanced Evasion Features

terraldr's Issues

How to use with exe payload

I have a c# payload in .exe and I'd like to evade antivirus, can I use this tool and how do i do it?

Corrupted DataFile.terra with C++ 14.32.31332

On a fresh windows10 install, with latest Visual Studio Community, I've observed what I tracked down to be a corruption on DataFile.terra

I tracked down the issue to be the version of C++ redist doing some cross-test:

• freshly installed VS, launching Terra.exe it dies with an Exception code 0xc0000374
• on an older setup I've been able to generate a Terra.exe that opens up a reverse connection to my c2
• changed windows version (21H2/1908) with no relevant changes, every new setup generates a terra.exe that dies with same exception
• moved a DataFile.terra from working box to a "broken" one, the compiled Terra.exe is valid
• the issue is probably on the generated terra file, meaning that GenerateRsrc.exe is someway broken
• tracked down main differences, the old setup had vcredist 14.32.31326 when newer ones have 14.32.31332
• removed 14.32.31332 from a "broken" setup and installed 14.32.31326, recompiled GenerateRsrc.exe, new DataFile.terra, Terra.exe works as expected

Latest Visual Studio comes with C++ redist version 14.43.31332 and based on my observation this breaks the compilation of DataFile.terra

Not properly compiling after generating files

I've followed the instructions to compile GenerateRsrc and use it with my payload to generate DataFile.terra file. Afterwards I replace DataFile.terra with new file and try to compile Tera project. Here are my screenshots below. Hopefully they make sense.
I get these errors. Any suggestions? I'm using Vis Studio 2022.

how to use it

bro how to use it