Eli.Decode is a tool to decode obfuscated shellcodes using the unicorn engine.
+ You may have problems or wrong decoded shellcodes…
+ You need the unicorn engine (http://www.unicorn-engine.org/) AND the capstone engine (http://www.capstone-engine.org/) (with the python bindings…).
Please note this is as easy as added / patching values in the “decoders” dictionnary, so… I just need to google it (let me time…). Finally, please note that new architectures might be added if they are supported by the unicorn engine (http://www.unicorn-engine.org/) AND the capstone engine (http://www.capstone-engine.org/).
tar xf 0.9.tar.gz
python setup.py install
git clone https://github.com/DeveloppSoft/Eli.Decode && cd Eli.Decode
python decoder.py --help