Bobby Cooke
966ea3058c
Merge pull request #33 from 0xbad53c/main
...
Add strreps for SMB, TCP and DNS
2023-11-22 15:25:50 -07:00
0xbad53c
6ba2ca5ff1
Add strreps for SMB, TCP and DNS
2023-11-17 09:46:39 +01:00
Bobby Cooke
553e6e6665
Merge from susMdT/main - Dylan Tran
...
Implement find_api_return_address_on_stack to find thread start frame…
2023-10-11 17:04:32 -07:00
Dylan Tran
77673238b9
Implement find_api_return_address_on_stack to find thread start frame return addresses rather than hard coded 0x14/0x21 offsets
2023-10-11 15:31:05 -07:00
Bobby Cooke
0c491b0555
Reflective Callstack Spoofing - Dylan Tran
...
Reflective Callstack Spoofing - co-author Dylan Tran
2023-10-06 10:06:07 -07:00
Bobby Cooke
b4c81489d6
Reflective Callstack Spoofing - Dylan Tran
...
Synthetic call stack spoofing added.
2023-10-06 09:40:04 -07:00
Bobby Cooke
d641dc47d6
Merge pull request #28 from ScriptIdiot/main
...
Support indirect syscall
2023-10-06 09:23:38 -07:00
James Yeung
16d4ee5c22
Update README.md
2023-09-04 22:19:40 +08:00
James Yeung
38b4b9e99c
Update BokuLoader.c
...
Avoid using R15 register
2023-09-04 22:15:03 +08:00
James Yeung
c788936f68
Update README.md
2023-07-23 16:36:19 +08:00
James Yeung
40d1abc83d
Update README.md
...
Support indirect syscall
2023-07-23 16:25:04 +08:00
James Yeung
bcca767ded
Update BokuLoader.h
...
Support indirect syscall
2023-07-23 16:20:30 +08:00
James Yeung
6f9d4be70f
Update BokuLoader.c
...
Support indirect syscall
2023-07-23 16:19:56 +08:00
Bobby Cooke
88bbfda41e
Delete bokuloaderbanner.png
2023-03-15 17:38:48 -07:00
Bobby Cooke
0f6febfcaf
Add files via upload
2023-03-15 17:38:39 -07:00
Bobby Cooke
4eda1185c2
Update README.md
2023-03-15 17:38:19 -07:00
Bobby Cooke
50295d3de4
Update README.md
2023-03-15 17:36:05 -07:00
Bobby Cooke
0eb8553b7d
Update README.md
2023-03-15 17:35:46 -07:00
Bobby Cooke
8e4455d5de
Delete bl_banner.png
2023-03-15 17:35:32 -07:00
Bobby Cooke
37c42948ca
Add files via upload
2023-03-15 17:35:24 -07:00
Bobby Cooke
b78cf1746b
Delete banner.png
2023-03-15 17:22:02 -07:00
Bobby Cooke
ac8ce95e1b
Add files via upload
2023-03-15 17:21:52 -07:00
Bobby Cooke
fd3741f322
Update README.md
2023-03-15 17:21:26 -07:00
Bobby Cooke
62120b3c84
Add files via upload
2023-03-15 17:20:39 -07:00
Bobby Cooke
2cc91e7c24
Add files via upload
2023-03-15 17:17:58 -07:00
Bobby Cooke
b85878131d
Update README.md
2023-03-15 17:09:00 -07:00
Bobby Cooke
1577518522
Add files via upload
2023-03-15 17:08:08 -07:00
Bobby Cooke
0f278bdbb3
Update README.md
2023-03-05 19:42:58 -07:00
Bobby Cooke
70755870fa
Update README.md
2023-03-05 19:35:06 -07:00
Bobby Cooke
c32b367431
Update README.md
2023-03-03 08:22:59 -07:00
Bobby Cooke
7a5d985929
Merge pull request #23 from xforcered/main
...
IAT Hooking functionality added, Fixed bugs
2023-03-03 06:18:17 -07:00
Bobby Cooke
1d61c810bb
IAT Hooking functionality added, Fixed bugs
...
Added IAT hooking functionality to support future planned feature releases. Currently non-default Kernel32.Sleep hook poc added to sleep with ZwDelayExecution direct syscall (experimental). Fixed issues with stack frames and stack alignment that happened on some builds - Shoutout to @ilove2pwn_ @C5pider @kyleavery_
2023-03-03 06:17:42 -07:00
Bobby Cooke
0aa215a0ec
Add files via upload
2023-03-03 06:12:54 -07:00
Bobby Cooke
fd30ec40bc
Update BokuLoader.cna
2023-03-02 18:00:26 -07:00
Bobby Cooke
641b34dd63
Merge pull request #22 from xforcered/main
...
Update README.md
2023-03-02 15:01:50 -07:00
Bobby Cooke
2395cb8447
Update README.md
2023-03-02 15:01:32 -07:00
Bobby Cooke
cbb2802cc6
Update README.md
2023-03-02 13:55:27 -07:00
Bobby Cooke
1c3b0e2291
Update BokuLoader.c
2023-03-02 13:16:31 -07:00
Bobby Cooke
49f24bc660
Add files via upload
2023-03-02 13:15:56 -07:00
Bobby Cooke
52c5984451
Update README.md
2023-03-02 06:25:22 -07:00
Bobby Cooke
fae45e63df
Update README.md
2023-03-02 06:23:15 -07:00
Bobby Cooke
d4b72073ae
Update BokuLoader.cna
2023-03-02 06:21:26 -07:00
Bobby Cooke
d193d3765a
Added support for x64 Pivot beacon obfuscation
...
Experimental feature in testing. Test to ensure it is working correctly.
2023-02-27 17:15:11 -07:00
Bobby Cooke
434ed2ac85
Update README.md
2023-02-26 16:09:01 -07:00
Bobby Cooke
288123c6c6
Update README.md
2023-02-26 16:08:09 -07:00
Bobby Cooke
902ddee18e
Update README.md
2023-02-24 19:48:20 -07:00
Bobby Cooke
944aab5874
UseRWX & Default Sleepmask (no kit) Support Added
...
Added support for malleable PE "set userwx" option. When using default "sleepmask true" (without sleepmask kit), you will need to set "userwx" to "true" to avoid writing to non-writable beacon.text memory. When using sleepmask kit which supports RX beacon.text memory, set "sleepmask true" && "userwx false".
2023-02-24 16:10:39 -07:00
Bobby Cooke
9426671f26
Update README.md
2023-02-24 16:07:34 -07:00
Bobby Cooke
301b03386d
UseRWX & Default Sleepmask (no kit) Support Added
...
Added support for malleable PE "set userwx" option. When using default "sleepmask true" (without sleepmask kit), you will need to set "userwx" to "true" to avoid writing to non-writable beacon.text memory. When using sleepmask kit which supports RX beacon.text memory, set "sleepmask true" && "userwx false".
2023-02-24 16:02:08 -07:00
Bobby Cooke
9fcdb56a45
UseRWX & Default Sleepmask (no kit) Support Added
...
Added support for malleable PE "set userwx" option. When using default "sleepmask true" (without sleepmask kit), you will need to set "userwx" to "true" to avoid writing to non-writable beacon.text memory. When using sleepmask kit which supports RX beacon.text memory, set "sleepmask true" && "userwx false".
2023-02-24 15:57:52 -07:00