Commit Graph

33 Commits

Author SHA1 Message Date
hypervis0r 6de15faa2c remove ucrtbased stuff from pebutils 2021-10-21 16:37:59 -07:00
hypervis0r 8b21f5a7f6 remove build dir from repo 2021-10-21 15:29:51 -07:00
hypervis0r 29e467d06a remove binary from repo 2021-10-21 15:29:01 -07:00
batsec 7a659e5533 Merge pull request #11 from JohnLaTwC/patch-1
Close handle on error exits to avoid leaking handle
2021-10-09 00:05:26 +01:00
John Lambert 6015d9560e Close handle on error exits to avoid leaking handle 2021-10-08 16:00:10 -07:00
batsec f3b7c59639 Merge pull request #10 from physics-sp/find-import-addresses
find all import addresses dinamically
2021-08-13 09:32:15 +01:00
physics-sp 24f2317d6d find all import addresses dinamically 2021-08-12 14:16:53 -03:00
batsec c74556a4ed Merge pull request #8 from hypervis0r/master
Implement NO_LINK flag
2021-08-07 22:56:57 +01:00
Hypervisor 53211bef19 Add some extra checks into darkloadlibrary.c 2021-08-07 14:38:49 -07:00
Hypervisor da43012aab Implement NO_LINK flag 2021-08-07 14:31:44 -07:00
batsec 22459ca64b Merge pull request #7 from physics-sp/find-dll-exports
Find DLL exports
2021-08-02 09:38:58 +01:00
physics-sp ab215ebb1d delete unused definition 2021-08-01 18:58:49 -03:00
physics-sp 2820acf36b add a few more changes and improvements 2021-08-01 18:40:21 -03:00
physics-sp 5480a9e4b0 add support for some edge-cases on LocalLdrGetProcedureAddress 2021-07-26 16:01:06 -03:00
physics-sp fbcf230a44 add code to find DLL exports 2021-07-23 22:02:25 -03:00
batsec e2d2bfc0c7 Update README.md 2021-07-23 10:30:48 +01:00
batsec 0bfacc7d15 Merge pull request #6 from physics-sp/add-syscalls
add NtAllocateVirtualMemory and NtProtectVirtualMemory syscalls
2021-07-22 09:38:10 +01:00
physics-sp 36217d173c fix integration bugs with SysWhispers2 2021-07-21 19:18:15 -03:00
physics-sp 2eac8058a8 add support for 32 bit builds 2021-07-21 18:57:29 -03:00
physics-sp a29eb09550 add NtAllocateVirtualMemory and NtProtectVirtualMemory syscalls
I used SysWhispers2, so it should work for all versions of Windows.
This is of course to bypass userland hooks. VirtualProtect is likely to
get denied by an EDR
2021-07-21 18:10:31 -03:00
batsec 9f881738d0 Merge pull request #1 from hypervis0r/master
Add .gitignore for Visual Studio files, fix Visual Studio Debug configuration and implement the LOAD_MEMORY functionality
2021-06-18 09:13:30 +01:00
Hypervisor 391085b614 Update README.md 2021-06-17 17:49:52 -06:00
Hypervisor fa174003ac Implemented LOAD_MEMORY option. 2021-06-17 17:44:39 -06:00
Hypervisor a48364d919 Delete this stupid .vs directory for the second time 2021-06-17 16:12:44 -06:00
Hypervisor 7d385421bd Merge branch 'master' of https://github.com/hypervis0r/DarkLoadLibrary into master 2021-06-17 16:09:34 -06:00
Hypervisor 93157cb8c4 Fixed some bugs with the Debug configuration.
Confirmed works now.
2021-06-17 16:08:01 -06:00
Hypervisor b645cda8ec Delete DarkLoadLibrary/.vs/DarkLoadLibrary/v16 directory 2021-06-17 15:57:04 -06:00
Hypervisor c1f0f89670 Added .gitignore for Visual Studio files 2021-06-17 15:56:43 -06:00
Hypervisor 5ec39e4087 Fix project settings to work with any system 2021-06-17 15:53:59 -06:00
batsec 4478103de4 Update README.md 2021-06-17 12:41:53 +01:00
dylan b76286239a upload 2021-06-17 11:39:49 +01:00
dylan 5554bd5c91 upload 2021-06-17 11:37:48 +01:00
dylan f527a14650 inital commit 2021-06-17 09:35:30 +01:00