Dobin Rutishauser
|
f40161b206
|
feature: correct dll function handling
|
2025-06-22 21:57:37 +02:00 |
|
Dobin Rutishauser
|
a782fd0842
|
refactor: injector (EOP -> overwrite)
|
2025-06-21 14:06:50 +02:00 |
|
Dobin Rutishauser
|
1db212de53
|
refactor: small cleanup
|
2025-06-21 10:19:01 +02:00 |
|
Dobin Rutishauser
|
7eefe7c444
|
refactor: better log output
|
2025-06-20 09:49:14 +02:00 |
|
Dobin Rutishauser
|
6864656381
|
refactor: make web work again (split project <-> settings)
|
2025-06-18 21:24:35 +02:00 |
|
Dobin Rutishauser
|
fcb40ccb6a
|
refactor: wrong logging. -> logger.
|
2025-06-10 12:36:40 +02:00 |
|
Dobin Rutishauser
|
ec0776d82b
|
refactor: fix tester.py (all tests ok)
|
2025-06-10 09:19:58 +02:00 |
|
Dobin Rutishauser
|
99ad23d69d
|
refactor: more commandline usability cleanup
|
2025-06-09 11:28:13 +02:00 |
|
Dobin Rutishauser
|
9ed0469884
|
refactor: rework logging
|
2025-06-09 10:10:02 +02:00 |
|
Dobin Rutishauser
|
4c49f2d816
|
refactor: syntax, types, logging, cleanup
|
2025-06-09 08:59:36 +02:00 |
|
Dobin Rutishauser
|
919aca0d70
|
refactor: fix some things shown by newer VS syntax checker, mostly type related
|
2025-01-25 18:07:24 +01:00 |
|
Dobin Rutishauser
|
1d3324686f
|
fix: recalculate pe checksum (implements #2)
|
2025-01-25 11:53:43 +01:00 |
|
Dobin
|
a5851c397b
|
fix: small anoying bugs
|
2024-07-21 11:14:29 +01:00 |
|
Dobin
|
fa588beb55
|
fix: data injection
|
2024-07-08 07:56:40 +01:00 |
|
Dobin
|
7847b8d40e
|
refactor: rework carrier/payload location calculation
|
2024-07-06 21:23:09 +01:00 |
|
Dobin
|
b6045d9c78
|
refactor: more debug
|
2024-07-05 10:44:40 +01:00 |
|
Dobin Rutishauser
|
c93234845b
|
feature: setting for disabling the window
|
2024-06-26 06:33:10 +02:00 |
|
Dobin Rutishauser
|
185c8fadb7
|
refactor: remove DecoderStyles enum
|
2024-06-25 09:41:14 +02:00 |
|
Dobin Rutishauser
|
240b5e6494
|
refactor: some cleanup
|
2024-06-23 17:17:24 +02:00 |
|
Dobin Rutishauser
|
fc64068139
|
refactor: put *manager back to superpe again
|
2024-06-23 17:07:21 +02:00 |
|
Dobin Rutishauser
|
e10f9c7fda
|
refactor: carrier->injectable so i have sane carrier- & payload locations (+cleaner injector)
|
2024-06-23 14:11:30 +02:00 |
|
Dobin Rutishauser
|
4e62df29db
|
refactor: more consistent log output indent
|
2024-06-22 16:35:20 +02:00 |
|
Dobin Rutishauser
|
bbd3297a95
|
refactor: iat references array, and various cleanup
|
2024-06-22 15:55:49 +02:00 |
|
Dobin Rutishauser
|
de77f50f06
|
feature: datareuse now supports multiple references -> fix change_ carriers
|
2024-06-22 12:59:21 +02:00 |
|
Dobin Rutishauser
|
0d320b38d0
|
refactor: attempt to simplify payload
|
2024-06-17 10:33:34 +02:00 |
|
Dobin Rutishauser
|
a1815ab7fe
|
feature: in-place dll loader (support)
|
2024-06-16 08:28:20 +02:00 |
|
Dobin
|
13320374d9
|
refactor: cleanup
|
2024-06-02 13:17:40 +01:00 |
|
Dobin
|
854c41300e
|
fix: small bugfixes
|
2024-05-29 08:28:23 +01:00 |
|
Dobin
|
87cb4bfe5b
|
feature: decoy in shellcode
|
2024-05-20 08:36:16 +01:00 |
|
Dobin
|
9bb8afb6c0
|
refactor: less log files
|
2024-05-19 13:03:34 +01:00 |
|
Dobin
|
849df50dc8
|
refactor: remove source_style enum, do it with directories
|
2024-05-19 10:33:06 +01:00 |
|
Dobin
|
32000b5b78
|
fix: some dll bugs
|
2024-05-13 22:01:16 +01:00 |
|
Dobin
|
87d8741f32
|
refactor: improve iat re-init handling / performance
|
2024-05-13 18:44:02 +01:00 |
|
Dobin
|
7ceb0af5a4
|
refactor: small code cleanup
|
2024-05-13 18:43:27 +01:00 |
|
Dobin
|
696599cb64
|
refactor: move capstone/keystone into its own file
|
2024-05-10 12:02:24 +01:00 |
|
Dobin
|
900c145557
|
feature: put payload into .rdata option
|
2024-05-09 21:04:37 +01:00 |
|
Dobin
|
3aa79afd70
|
refactor: read shellcode (carrier, payload) directly, no more files
|
2024-05-08 14:34:19 +01:00 |
|
Dobin
|
61f7cf0a5b
|
tests: fix and reorganize
|
2024-05-08 11:44:37 +01:00 |
|
Dobin
|
b8c834ac56
|
feature: patch missing iat (+refactor: remove ExeHost)
|
2024-05-06 11:00:50 +01:00 |
|
Dobin
|
2c9a20d822
|
feature: make exe to UI
|
2024-05-05 13:38:08 +01:00 |
|
Dobin
|
8ae738b841
|
feature: remove addingrelocation by making function hijack a relative jmp
|
2024-05-05 12:53:31 +01:00 |
|
Dobin
|
25e504ee09
|
fix: check for corruption when exes are very small
|
2024-04-27 20:29:04 +01:00 |
|
Dobin
|
aca1ed46bc
|
refactor: remove recursion from DerBackdoorer
|
2024-04-27 14:14:23 +01:00 |
|
Dobin
|
bc6cc4df2d
|
refactor: function hijacker / DerBackdoorer rework
|
2024-04-20 15:09:17 +01:00 |
|
Dobin
|
3bbff69cdf
|
feature: check function size of eop dll func
|
2024-04-14 18:20:32 +01:00 |
|
Dobin
|
d4e4507e19
|
refactor: cleanup, create unittest, fix get_physical_address
|
2024-04-14 14:04:15 +01:00 |
|
Dobin
|
b4671c8690
|
fix: make DLL + func + EOP work
|
2024-04-14 11:47:47 +01:00 |
|
Dobin
|
368b14934d
|
fix: tester.py, and add testcases for DLL
|
2024-04-13 12:23:36 +01:00 |
|
Dobin
|
a95203e2b5
|
refactor: better DLL support
|
2024-04-12 22:01:10 +01:00 |
|
Dobin
|
c6a0cf14b0
|
feature: DLL support
|
2024-04-07 22:50:43 +01:00 |
|