 Dobin
|
7ceb0af5a4
|
refactor: small code cleanup
|
2024-05-13 18:43:27 +01:00 |
|
|
Dobin
|
696599cb64
|
refactor: move capstone/keystone into its own file
|
2024-05-10 12:02:24 +01:00 |
|
|
Dobin
|
900c145557
|
feature: put payload into .rdata option
|
2024-05-09 21:04:37 +01:00 |
|
|
Dobin
|
3aa79afd70
|
refactor: read shellcode (carrier, payload) directly, no more files
|
2024-05-08 14:34:19 +01:00 |
|
|
Dobin
|
61f7cf0a5b
|
tests: fix and reorganize
|
2024-05-08 11:44:37 +01:00 |
|
|
Dobin
|
b8c834ac56
|
feature: patch missing iat (+refactor: remove ExeHost)
|
2024-05-06 11:00:50 +01:00 |
|
|
Dobin
|
2c9a20d822
|
feature: make exe to UI
|
2024-05-05 13:38:08 +01:00 |
|
|
Dobin
|
8ae738b841
|
feature: remove addingrelocation by making function hijack a relative jmp
|
2024-05-05 12:53:31 +01:00 |
|
|
Dobin
|
1b245e5506
|
refactor: make asm cleanup/fixup work in memory
|
2024-04-28 19:43:08 +01:00 |
|
|
Dobin
|
c82c99e0eb
|
refactor: all asm text parsing into asmparser.py
|
2024-04-28 17:56:12 +01:00 |
|
|
Dobin
|
25e504ee09
|
fix: check for corruption when exes are very small
|
2024-04-27 20:29:04 +01:00 |
|
|
Dobin
|
aca1ed46bc
|
refactor: remove recursion from DerBackdoorer
|
2024-04-27 14:14:23 +01:00 |
|
|
Dobin
|
bc6cc4df2d
|
refactor: function hijacker / DerBackdoorer rework
|
2024-04-20 15:09:17 +01:00 |
|
|
Dobin
|
3bbff69cdf
|
feature: check function size of eop dll func
|
2024-04-14 18:20:32 +01:00 |
|
|
Dobin
|
d4e4507e19
|
refactor: cleanup, create unittest, fix get_physical_address
|
2024-04-14 14:04:15 +01:00 |
|
|
Dobin
|
b4671c8690
|
fix: make DLL + func + EOP work
|
2024-04-14 11:47:47 +01:00 |
|
|
Dobin
|
368b14934d
|
fix: tester.py, and add testcases for DLL
|
2024-04-13 12:23:36 +01:00 |
|
|
Dobin
|
a95203e2b5
|
refactor: better DLL support
|
2024-04-12 22:01:10 +01:00 |
|
|
Dobin
|
c6a0cf14b0
|
feature: DLL support
|
2024-04-07 22:50:43 +01:00 |
|
|
Dobin
|
a488cf1b17
|
feature: inject into dll basic support
|
2024-04-07 13:15:55 +01:00 |
|
|
Dobin
|
a03c267070
|
refactor: rename central data structures
|
2024-04-07 11:34:13 +01:00 |
|
|
Dobin
|
3207aa296d
|
refactor: small fixes
|
2024-03-29 20:47:49 +00:00 |
|
|
Dobin
|
a6dbbe69ac
|
refactor: move directories around 1/2
|
2024-03-29 18:02:16 +00:00 |
|
|
Dobin
|
a46e0e4f13
|
refactor: make log/observer nice
|
2024-03-29 12:32:24 +00:00 |
|
|
Dobin
|
4064cf94ba
|
refactor: new data/ structure
|
2024-03-27 20:13:14 +00:00 |
|
|
Dobin
|
f08334dc1a
|
feature: dev (shellcode projects) phase 1
|
2024-03-26 17:46:09 +00:00 |
|
|
Dobin
|
da567af27e
|
refactor: dedicated tester
|
2024-03-16 14:38:50 +00:00 |
|
|
Dobin
|
2e491272c9
|
refactor: fix a bug and cleanup
|
2024-03-16 14:16:39 +00:00 |
|
|
Dobin
|
03291aed98
|
refactor: background task support
|
2024-03-08 11:46:55 +00:00 |
|
|
Dobin
|
4a489a3183
|
refactor: remove exehost code_virtaddr and code_size with code_section
|
2024-03-04 18:41:39 +00:00 |
|
|
Dobin
|
dacef30bb0
|
refactor: :x -> :X
|
2024-03-04 18:32:41 +00:00 |
|
|
Dobin
|
5e46432d96
|
fix: find gaps in the relocation for data inject
|
2024-03-03 19:19:58 +00:00 |
|
|
Dobin
|
903add2c4f
|
refactor: make .rdata offset grabber better
|
2024-03-03 17:14:40 +00:00 |
|
|
Dobin
|
286ad055d3
|
feature: calculate offset into .rdata (tmp)
|
2024-03-03 16:58:44 +00:00 |
|
|
Dobin
|
d3a750288e
|
ui: nicer output
|
2024-03-01 20:55:06 +00:00 |
|
|
Dobin
|
f74bd574b4
|
refactor: mype -> superpe
|
2024-03-01 20:46:52 +00:00 |
|
|
Dobin
|
aed5b168c2
|
refactor: remove derbackdoorer/ dir into peparser/ to pe/
|
2024-03-01 19:25:28 +00:00 |
|
|
Dobin
|
115c654429
|
refactor: move stuff to working/
|
2024-03-01 19:04:05 +00:00 |
|
|
Dobin
|
6175875ea1
|
refactor: reorganize files into data/
|
2024-03-01 17:07:01 +00:00 |
|
|
Dobin
|
9e551d9a19
|
refactor: cleanup 3
|
2024-03-01 14:07:18 +00:00 |
|
|
Dobin
|
112964c11c
|
refactor: cleanup 2
|
2024-03-01 13:33:01 +00:00 |
|
|
Dobin
|
78027916e2
|
refactor: cleanup 1
|
2024-03-01 13:13:40 +00:00 |
|
|
Dobin
|
d0500107c0
|
refactor: derbackdoorer / mype / injector (temp)
|
2024-03-01 11:36:58 +00:00 |
|
|
Dobin
|
87c0cc2944
|
fix: peb_reuse bugs and similar
|
2024-02-28 20:12:52 +00:00 |
|
|
Dobin
|
019b7c97d8
|
refactor: DataReuseEntry(), IatEntry()
|
2024-02-26 20:33:29 +00:00 |
|
|
Dobin
|
a13d86d9cd
|
refactor: log msgs, and var renaming
|
2024-02-26 20:18:15 +00:00 |
|
|
Dobin
|
16438e799b
|
refactor: make address type more clear
|
2024-02-25 20:33:19 +00:00 |
|
|
Dobin
|
5301ef7b2e
|
refactor: removed DataReuser
|
2024-02-25 20:28:57 +00:00 |
|
|
Dobin
|
462f23d8cf
|
refactor: datareuse fixups into project.carrier as transport
|
2024-02-25 18:20:37 +00:00 |
|
|
Dobin
|
430f105240
|
refactor: iat related
|
2024-02-25 16:25:36 +00:00 |
|