A simple Nim stager (w/ fiber execution)

This repo accompanies a post on https://tishina.in/execution/nim-fibers

It is essentially a simple stager PoC that uses syscalls+FreshCopy for ntdll unhooking and fibers for shellcode execution

python3 encoder.py <shcode_file> to encode the shellcode (AES encryption coming soon™).

Upload the resulting <shcode_file>.html somewhere and change the URL in the fiberstager (you can also regenerate the syscalls.nim file with NimlineWhispers2)

fiber-stager is built with just nim c and your preferred flags.

dependencies: winim, ptr_math

@ajpc500 for NimlineWhispers2 @khchen for Winim @byt3bl33d3r for the ntdll unhooking example