143 Commits

Author	SHA1	Message	Date
Dobin	a5851c397b	fix: small anoying bugs	2024-07-21 11:14:29 +01:00
Dobin	fa588beb55	fix: data injection	2024-07-08 07:56:40 +01:00
Dobin	4bed8d1a95	refactor: improve sirallocalot	2024-07-07 12:36:15 +01:00
Dobin	7847b8d40e	refactor: rework carrier/payload location calculation	2024-07-06 21:23:09 +01:00
Dobin	6d05779c7c	fix: config int bug	2024-07-05 10:44:48 +01:00
Dobin	b6045d9c78	refactor: more debug	2024-07-05 10:44:40 +01:00
Dobin Rutishauser	c93234845b	feature: setting for disabling the window	2024-06-26 06:33:10 +02:00
Dobin Rutishauser	2b576df872	featur: make anti-debug more configurable	2024-06-26 03:03:13 +02:00
Dobin Rutishauser	185c8fadb7	refactor: remove DecoderStyles enum	2024-06-25 09:41:14 +02:00
Dobin Rutishauser	68d1e1a535	fix: bug	2024-06-25 07:54:51 +02:00
Dobin Rutishauser	b6db721c12	feature: MyVirtualProtect	2024-06-24 16:58:44 +02:00
Dobin Rutishauser	240b5e6494	refactor: some cleanup	2024-06-23 17:17:24 +02:00
Dobin Rutishauser	fc64068139	refactor: put *manager back to superpe again	2024-06-23 17:07:21 +02:00
Dobin Rutishauser	e10f9c7fda	refactor: carrier->injectable so i have sane carrier- & payload locations (+cleaner injector)	2024-06-23 14:11:30 +02:00
Dobin Rutishauser	4e62df29db	refactor: more consistent log output indent	2024-06-22 16:35:20 +02:00
Dobin Rutishauser	bbd3297a95	refactor: iat references array, and various cleanup	2024-06-22 15:55:49 +02:00
Dobin Rutishauser	de77f50f06	feature: datareuse now supports multiple references -> fix change_ carriers	2024-06-22 12:59:21 +02:00
Dobin Rutishauser	ae3567847c	feature: guardrail data	2024-06-18 16:05:37 +02:00
Dobin Rutishauser	0d320b38d0	refactor: attempt to simplify payload	2024-06-17 10:33:34 +02:00
Dobin Rutishauser	b5641214e2	refactor: fix carrier & templates (modularize)	2024-06-17 05:52:56 +02:00
Dobin Rutishauser	434c099365	ui: make nicer + plugins	2024-06-16 17:49:36 +02:00
Dobin Rutishauser	a1815ab7fe	feature: in-place dll loader (support)	2024-06-16 08:28:20 +02:00
Dobin Rutishauser	46ad17cf10	fix: make masm_shc errors exceptions	2024-06-13 08:50:31 +02:00
Dobin Rutishauser	71b38a064c	refactor: make decoy a plugin too	2024-06-10 10:06:24 +02:00
Dobin Rutishauser	85585e598e	refactor: prepare antiemulation more modular	2024-06-10 09:02:37 +02:00
Dobin Rutishauser	df9937df96	feature: antiemulation in templates	2024-06-10 08:02:32 +02:00
Dobin	13320374d9	refactor: cleanup	2024-06-02 13:17:40 +01:00
Dobin	854c41300e	fix: small bugfixes	2024-05-29 08:28:23 +01:00
Dobin	0e08fde15d	feature: 2-byte xor key	2024-05-20 09:21:44 +01:00
Dobin	87cb4bfe5b	feature: decoy in shellcode	2024-05-20 08:36:16 +01:00
Dobin	9bb8afb6c0	refactor: less log files	2024-05-19 13:03:34 +01:00
Dobin	849df50dc8	refactor: remove source_style enum, do it with directories	2024-05-19 10:33:06 +01:00
Dobin	32000b5b78	fix: some dll bugs	2024-05-13 22:01:16 +01:00
Dobin	86c90434e1	refactor: rename AsmParser -> AsmTextParser	2024-05-13 18:55:32 +01:00
Dobin	87d8741f32	refactor: improve iat re-init handling / performance	2024-05-13 18:44:02 +01:00
Dobin	7ceb0af5a4	refactor: small code cleanup	2024-05-13 18:43:27 +01:00
Dobin	696599cb64	refactor: move capstone/keystone into its own file	2024-05-10 12:02:24 +01:00
Dobin	900c145557	feature: put payload into .rdata option	2024-05-09 21:04:37 +01:00
Dobin	3aa79afd70	refactor: read shellcode (carrier, payload) directly, no more files	2024-05-08 14:34:19 +01:00
Dobin	61f7cf0a5b	tests: fix and reorganize	2024-05-08 11:44:37 +01:00
Dobin	b8c834ac56	feature: patch missing iat (+refactor: remove ExeHost)	2024-05-06 11:00:50 +01:00
Dobin	2c9a20d822	feature: make exe to UI	2024-05-05 13:38:08 +01:00
Dobin	8ae738b841	feature: remove addingrelocation by making function hijack a relative jmp	2024-05-05 12:53:31 +01:00
Dobin	1b245e5506	refactor: make asm cleanup/fixup work in memory	2024-04-28 19:43:08 +01:00
Dobin	c82c99e0eb	refactor: all asm text parsing into asmparser.py	2024-04-28 17:56:12 +01:00
Dobin	25e504ee09	fix: check for corruption when exes are very small	2024-04-27 20:29:04 +01:00
Dobin	aca1ed46bc	refactor: remove recursion from DerBackdoorer	2024-04-27 14:14:23 +01:00
Dobin	bc6cc4df2d	refactor: function hijacker / DerBackdoorer rework	2024-04-20 15:09:17 +01:00
Dobin	3bbff69cdf	feature: check function size of eop dll func	2024-04-14 18:20:32 +01:00
Dobin	d4e4507e19	refactor: cleanup, create unittest, fix get_physical_address	2024-04-14 14:04:15 +01:00