256 Commits

Author SHA1 Message Date
Ege Balcı f6eb2dc4b4 SGN version updated. 2024-02-22 18:44:12 +01:00
Ege Balcı fae3275b68 Amber v3.2 release.
- Major loader update!
  - Added TLS callback support
  - Added forwarded imports support
  - Removed GetProcAddress and LoadLibrary WinAPI usage
  - Switched to NTDLL WinApi functions
  - Wiper code improved
- Added lite loader option for appending PE files on the fly!
- Added experimental raw syscall loader
- Added static build flags in makefile
- File name bug fixed
- Dockerfile updated
- Github workflows added
- README updated
2023-06-24 13:58:23 +02:00
Ege Balcı a331b344bf Amber v3.1 release (Bug fixes, new config parser, package updates) v3.1 2021-02-13 23:13:57 +03:00
Ege Balcı 074510e75c DLL loader stub assembly bug fix (thanks to 0x33c0unt) 2021-01-10 01:40:12 +03:00
Ege Balcı da4bd3fff7 SGN import fixed 2020-12-23 19:15:38 +03:00
Ege Balcı 7b15b92f64 Added submodules 2020-12-23 19:13:57 +03:00
Ege Balcı 4f69ba1c22 v3.0 Stable Release !!! 2020-11-26 22:48:05 +03:00
Ege Balcı a104902480 First working 3.0 alpha build 2020-11-20 00:33:48 +03:00
Ege Balcı daccbd308c Loader bug fixes, new banner and spinner 2020-11-17 00:37:04 +03:00
Ege Balcı 8f81fb662a Filemapping bug fixed and x86 reflective payload working 2020-10-30 03:00:53 +03:00
Ege Balcı b73750f8c3 Amber 3.0 Loaders tested and working 2020-10-20 16:05:11 +03:00
EgeBalci c6cae74ea7 Typo fix 2.0 2018-12-15 17:30:50 +03:00
EgeBalci 632236e1e9 New docker file for 2.0 release 2018-12-15 17:23:31 +03:00
EgeBalci 424507c339 Statik files converted to a remote import 2018-12-15 16:56:19 +03:00
EgeBalci 93ef39b744 Go get bug fix 2018-12-15 16:50:56 +03:00
EgeBalci 3821402519 rsrc.syso removed 2018-12-15 16:28:10 +03:00
EgeBalci ea0d52f510 README update 2018-12-15 16:18:02 +03:00
EgeBalci 6cb19994e5 Dockerfile adjusted for 2.0 release
README update
2018-12-15 16:13:27 +03:00
EgeBalci ef2a0abce8 Windows compatibility related issues resolved 2018-12-15 15:16:12 +03:00
EgeBalci c3ed4a78f1 Resource added to main amber binary 2018-12-14 16:34:37 +03:00
EgeBalci 0938b205fa Statik files updated 2018-12-13 01:12:27 +03:00
EgeBalci 9500449b4c Comment added 2018-12-13 01:11:44 +03:00
EgeBalci cb70de9bef README update 2018-12-12 23:57:14 +03:00
EgeBalci 4825fa198a - Formating fix
- Image base constraints added
2018-12-10 21:23:06 +03:00
EgeBalci 18b8a7252d - x64 stub bug fixed
- alignBase function disabled
2018-12-10 01:21:09 +03:00
EgeBalci 41400c27c0 - Align base function added
- CPU core counter bypass method added
2018-12-09 17:42:58 +03:00
EgeBalci 21fdbec75c - Function name obfuscation added
- Anti-Analysis stub added
- FS library localized
2018-12-09 14:43:33 +03:00
EgeBalci 3186023415 README update 2018-12-08 00:41:31 +03:00
EgeBalci d2c93aad28 MAJOR VERSION UPDATE !
- x64 supoort added
- x86/x64 assemly stubs rewritten
- Only remaining dependency nasm and go
- C++ stubs converted to go
- map.go converted into a library (mape)
- core files are stored inside the source with statik project
- Installation mechanism removed
- Go package support added
- Workspace mechanism added
2018-12-08 00:29:47 +03:00
EgeBalci 5eef6ccb8f Started writing golang stub 2018-07-03 15:21:04 +03:00
EgeBalci ebda5c1069 Writing x64 code assembly headers (Total mess) :( 2018-07-02 18:01:05 +03:00
EgeBalci 1015069e2f ASLR support added to iat_api 2018-06-07 11:45:55 +03:00
EgeBalci c2c7bb72be README update 2018-05-09 12:46:36 +03:00
EgeBalci af56cc9977 README update 2018-05-09 12:39:15 +03:00
EgeBalci 935e872a6f Version spesific signatures removed.
Integrity check errors adjusted.
2018-04-03 23:12:13 +03:00
EgeBalci 99d2c15c19 Added spesific signatures for version 1.4 2018-04-03 23:03:37 +03:00
EgeBalci 9fb4da5515 New resource loading stub added (Very experimental !!) 2018-04-03 22:47:22 +03:00
EgeBalci c9d1ea5424 Typo 2018-03-30 23:22:58 +03:00
EgeBalci ca10d1d3e1 Typo fix 2018-03-30 23:19:34 +03:00
EgeBalci d4a1bfa24d DLL support added !
Resource data updated.
Better code & verbose output.
2018-03-30 23:05:13 +03:00
EgeBalci a537269c88 Key size bug on reflective payloads fixed.
Better verbose errors.
2018-03-30 17:20:49 +03:00
EgeBalci f2863df2ca --ignore-mapping-size & --ignore-alignment parameters merged together to -ignore-integrity 2018-03-27 15:02:24 +03:00
EgeBalci c838bc2d62 Better coding 2018-03-27 14:54:33 +03:00
EgeBalci 8663119d9c x64 PE file mapping added (experimental)
PE file scraper bug fixed (Only Workaround)
More analysis verbose output.
2018-03-26 22:19:47 +03:00
EgeBalci b7ae592528 PE header scraper bug fixed 2018-03-24 19:57:37 +03:00
EgeBalci 242b4ff965 Added PE header scraper
Version 1.3.0
2018-03-24 00:04:40 +03:00
EgeBalci d83a4e0e37 Progress bar bug fixed 2018-03-09 12:42:39 +03:00
EgeBalci 6e43b073ea New parameter parsing with golang flag package
Better error handling
Some parameters renamed
New setup folder
Several color adjustments
New help menu design
Clener code
2018-03-07 21:26:09 +03:00
EgeBalci d4efb9c300 Removed HideWindow function 2018-03-03 23:00:15 +03:00
EgeBalci 46ade00e31 Extended error messages can be seen on verbose mode.
Applied som gofmt magic.
2018-03-02 17:54:45 +03:00