admin/bats3c-DarkLoadLibrary
1
0
Fork 0
mirror of https://github.com/bats3c/DarkLoadLibrary synced 2026-06-06 15:14:33 +00:00
Code Issues Packages Projects Releases Wiki Activity
36 Commits 1 Branch 0 Tags
master
Commit Graph

13 Commits

Author SHA1 Message Date
hypervis0r f67b431dd4 remove ucrtbased from darkloadlibrary.c 2021-10-21 17:19:22 -07:00
hypervis0r c301793e6a fix ParseFileName to be better, and to get rid of ucrtbased 2021-10-21 16:55:28 -07:00
hypervis0r 6de15faa2c remove ucrtbased stuff from pebutils 2021-10-21 16:37:59 -07:00
physics-sp 24f2317d6d find all import addresses dinamically 2021-08-12 14:16:53 -03:00
Hypervisor da43012aab Implement NO_LINK flag 2021-08-07 14:31:44 -07:00
physics-sp ab215ebb1d delete unused definition 2021-08-01 18:58:49 -03:00
physics-sp 2820acf36b add a few more changes and improvements 2021-08-01 18:40:21 -03:00
physics-sp 5480a9e4b0 add support for some edge-cases on LocalLdrGetProcedureAddress 2021-07-26 16:01:06 -03:00
physics-sp fbcf230a44 add code to find DLL exports 2021-07-23 22:02:25 -03:00
physics-sp 36217d173c fix integration bugs with SysWhispers2 2021-07-21 19:18:15 -03:00
physics-sp a29eb09550 add NtAllocateVirtualMemory and NtProtectVirtualMemory syscalls 
I used SysWhispers2, so it should work for all versions of Windows.
This is of course to bypass userland hooks. VirtualProtect is likely to
get denied by an EDR
 2021-07-21 18:10:31 -03:00
Hypervisor fa174003ac Implemented LOAD_MEMORY option. 2021-06-17 17:44:39 -06:00
dylan 5554bd5c91 upload 2021-06-17 11:37:48 +01:00