368 Commits
Author SHA1 Message Date
Bobby Cooke 27c763f01a Update README.md 2023-02-21 22:01:38 -07:00
Bobby Cooke ffe7ebde0b Update README.md 2023-02-17 12:23:43 -07:00
Bobby Cooke d558a130ee Update README.md 2023-02-17 12:22:44 -07:00
Bobby Cooke 7d28309d23 Update README.md 2023-02-17 12:18:21 -07:00
Bobby Cooke 544074e745 Fix for C2 profile conflict
boku_pe_mask($temp_dll) can cause issue if prepend transform is in C2 profile. Causes wrong bytes to be overwritten due to offset change. Disabled boku_pe_mask to honor C2 profile transformations.
2023-02-12 08:19:18 -07:00
Bobby Cooke 7fe775bf72 Merge pull request #17 from xforcered/main
Supports Obfuscate, Cleanup, & Sleepmask Evasions
2023-02-10 16:34:29 -06:00
Bobby Cooke 68561ecae8 Supports Obfuscate, Cleanup, & Sleepmask Evasions
BokuLoader now supports the Malleable PE evasion features defined in the Malleable C2 profile.
2023-02-10 15:34:05 -07:00
Bobby Cooke c3dac7853b Update BokuLoader.cna 2023-02-10 15:28:18 -07:00
Bobby Cooke 762c1d61ef Update BokuLoader.h 2023-02-10 15:27:47 -07:00
Bobby Cooke 3c77138c87 Update BokuLoader.c 2023-02-10 15:27:27 -07:00
Bobby Cooke 92b82887cf Update BokuLoader.cna
new way to get raw beacon addr
2023-02-10 11:24:14 -07:00
Bobby Cooke b2f0611852 Merge pull request #16 from xforcered/main
Updated CNA and get beacon base addr
2023-02-10 12:12:05 -06:00
Bobby Cooke 930aa29335 Update BokuLoader.cna
shows Malleable PE evasion options in script console
2023-02-10 11:11:05 -07:00
Bobby Cooke 58b2054a00 New way to get raw beacon base address
New way to get raw beacon base address
2023-02-10 11:10:10 -07:00
Bobby Cooke 771ffbf058 New way to get raw beacon base address
New way to get raw beacon base address
2023-02-10 11:09:37 -07:00
Bobby Cooke 016c992bee Delete BokuLoader.cna 2023-02-10 10:56:33 -07:00
Bobby Cooke 5380c2fe4e Working with Sleepmask & Sleepmask Kit evasions
Working with Sleepmask & Sleepmask Kit evasions
2023-02-10 09:00:51 -07:00
Bobby Cooke 03e1857cd5 Working with Sleepmask & Sleepmask Kit evasions
Working with Sleepmask & Sleepmask Kit evasions
2023-02-10 08:51:56 -07:00
Bobby Cooke c6334dccef Working with Sleepmask & Sleepmask Kit evasions
Working with Sleepmask & Sleepmask Kit evasions
2023-02-10 08:49:35 -07:00
Bobby Cooke 529cbeee98 Working with Sleepmask & Sleepmask Kit evasions
Working with Sleepmask & Sleepmask Kit evasions
2023-02-10 08:48:20 -07:00
Bobby Cooke 1340518827 Update BokuLoader.c 2023-02-03 11:22:14 -07:00
Bobby Cooke 35c236d5c6 Delete placeholder.txt 2023-02-03 07:44:29 -07:00
Bobby Cooke 6d8210d7fe Supports cleanup "true" Malleable C2 option 2023-02-01 11:13:40 -07:00
Bobby Cooke d16ef491c0 Delete BokuLoader.x64.o 2023-01-31 13:56:53 -07:00
Bobby Cooke 8776189011 upgraded to LdrLoadDll & LdrGetProcedureAddress
upgraded to LdrLoadDll & LdrGetProcedureAddress & code optimizations.
2023-01-31 13:56:40 -07:00
Bobby Cooke 9a0aa1b74e Add files via upload 2023-01-31 13:55:30 -07:00
Bobby Cooke e26e185d2b Add files via upload 2023-01-31 13:55:23 -07:00
Bobby Cooke 134b5eeee6 Delete BokuLoader64.c 2023-01-31 13:55:12 -07:00
Bobby Cooke 69443cd87b Update BokuLoader64.c
getApis() function added
2023-01-30 17:05:25 -07:00
Bobby Cooke 4398bc1c37 Update BokuLoader64.c
XGetProcAddress and getSymbolAddress enhancements
2023-01-30 17:01:27 -07:00
Bobby Cooke c5b7cb0848 Update BokuLoader64.c 2022-07-29 20:39:21 -07:00
Bobby Cooke a5f85b407b Feature Update!
+ Added Detection Guidance + Stomp MZ Magic Bytes + Find-Self EggHunter + PE Header Obfuscation + PE String Replacement + Prepend ASM Instructions
2022-07-19 11:51:50 -07:00
Bobby Cooke ccbe4e78a3 Feature Update!
+ Added Detection Guidance + Stomp MZ Magic Bytes + Find-Self EggHunter + PE Header Obfuscation + PE String Replacement + Prepend ASM Instructions
2022-07-08 11:46:03 -07:00
Bobby Cooke 7626500c1c Update BokuLoader.cna 2022-07-08 11:42:00 -07:00
Bobby Cooke 292c00e2c4 Update BokuLoader.cna 2022-07-08 11:39:40 -07:00
Bobby Cooke 335980e6fd Update README.md 2022-07-08 11:34:19 -07:00
Bobby Cooke 6cb1bce0bf Update README.md 2022-07-08 11:30:43 -07:00
Bobby Cooke 6568b3bb5b Feature Update!
+ Stomp MZ Magic Bytes
+ Find-Self EggHunter
+ PE Header Obfuscation 
+ PE String Replacement 
+ Prepend ASM Instructions
2022-07-08 10:31:14 -07:00
Bobby Cooke 13c0ea34a6 Add files via upload 2022-07-08 10:29:34 -07:00
Bobby Cooke 3ceb5767d1 Update README.md 2022-07-08 10:29:26 -07:00
Bobby Cooke abc726f56b Delete images directory 2022-07-08 10:22:48 -07:00
Bobby Cooke e17ea4d6b2 Add files via upload 2022-07-08 10:22:29 -07:00
Bobby Cooke f11a616887 Add files via upload 2022-07-08 10:22:20 -07:00
Bobby Cooke 93d086fbe6 Feature Update!
+ Stomp MZ Magic Bytes
+ Find-Self EggHunter
+ PE Header Obfuscation
+ PE String Replacement
+ Prepend ASM Instructions
2022-07-06 14:14:27 -07:00
Bobby Cooke e49edbe2b3 Update BokuLoader64.c 2022-06-20 12:11:09 -07:00
Bobby Cooke 78e4723ab6 Update README.md 2022-06-09 16:02:05 -07:00
Bobby Cooke f1bf734156 Add files via upload 2022-06-09 16:01:44 -07:00
Bobby Cooke 9b8b2a4472 Add files via upload
String Caesar Cipher
2022-06-09 16:00:06 -07:00
Bobby Cooke a03eac4647 Add files via upload 2022-06-09 11:25:28 -07:00
Bobby Cooke a7870adfd8 Update README.md 2022-06-09 11:13:16 -07:00