Bobby Cooke
27c763f01a
Update README.md
2023-02-21 22:01:38 -07:00
Bobby Cooke
ffe7ebde0b
Update README.md
2023-02-17 12:23:43 -07:00
Bobby Cooke
d558a130ee
Update README.md
2023-02-17 12:22:44 -07:00
Bobby Cooke
7d28309d23
Update README.md
2023-02-17 12:18:21 -07:00
Bobby Cooke
544074e745
Fix for C2 profile conflict
...
boku_pe_mask($temp_dll) can cause issue if prepend transform is in C2 profile. Causes wrong bytes to be overwritten due to offset change. Disabled boku_pe_mask to honor C2 profile transformations.
2023-02-12 08:19:18 -07:00
Bobby Cooke
7fe775bf72
Merge pull request #17 from xforcered/main
...
Supports Obfuscate, Cleanup, & Sleepmask Evasions
2023-02-10 16:34:29 -06:00
Bobby Cooke
68561ecae8
Supports Obfuscate, Cleanup, & Sleepmask Evasions
...
BokuLoader now supports the Malleable PE evasion features defined in the Malleable C2 profile.
2023-02-10 15:34:05 -07:00
Bobby Cooke
c3dac7853b
Update BokuLoader.cna
2023-02-10 15:28:18 -07:00
Bobby Cooke
762c1d61ef
Update BokuLoader.h
2023-02-10 15:27:47 -07:00
Bobby Cooke
3c77138c87
Update BokuLoader.c
2023-02-10 15:27:27 -07:00
Bobby Cooke
92b82887cf
Update BokuLoader.cna
...
new way to get raw beacon addr
2023-02-10 11:24:14 -07:00
Bobby Cooke
b2f0611852
Merge pull request #16 from xforcered/main
...
Updated CNA and get beacon base addr
2023-02-10 12:12:05 -06:00
Bobby Cooke
930aa29335
Update BokuLoader.cna
...
shows Malleable PE evasion options in script console
2023-02-10 11:11:05 -07:00
Bobby Cooke
58b2054a00
New way to get raw beacon base address
...
New way to get raw beacon base address
2023-02-10 11:10:10 -07:00
Bobby Cooke
771ffbf058
New way to get raw beacon base address
...
New way to get raw beacon base address
2023-02-10 11:09:37 -07:00
Bobby Cooke
016c992bee
Delete BokuLoader.cna
2023-02-10 10:56:33 -07:00
Bobby Cooke
5380c2fe4e
Working with Sleepmask & Sleepmask Kit evasions
...
Working with Sleepmask & Sleepmask Kit evasions
2023-02-10 09:00:51 -07:00
Bobby Cooke
03e1857cd5
Working with Sleepmask & Sleepmask Kit evasions
...
Working with Sleepmask & Sleepmask Kit evasions
2023-02-10 08:51:56 -07:00
Bobby Cooke
c6334dccef
Working with Sleepmask & Sleepmask Kit evasions
...
Working with Sleepmask & Sleepmask Kit evasions
2023-02-10 08:49:35 -07:00
Bobby Cooke
529cbeee98
Working with Sleepmask & Sleepmask Kit evasions
...
Working with Sleepmask & Sleepmask Kit evasions
2023-02-10 08:48:20 -07:00
Bobby Cooke
1340518827
Update BokuLoader.c
2023-02-03 11:22:14 -07:00
Bobby Cooke
35c236d5c6
Delete placeholder.txt
2023-02-03 07:44:29 -07:00
Bobby Cooke
6d8210d7fe
Supports cleanup "true" Malleable C2 option
2023-02-01 11:13:40 -07:00
Bobby Cooke
d16ef491c0
Delete BokuLoader.x64.o
2023-01-31 13:56:53 -07:00
Bobby Cooke
8776189011
upgraded to LdrLoadDll & LdrGetProcedureAddress
...
upgraded to LdrLoadDll & LdrGetProcedureAddress & code optimizations.
2023-01-31 13:56:40 -07:00
Bobby Cooke
9a0aa1b74e
Add files via upload
2023-01-31 13:55:30 -07:00
Bobby Cooke
e26e185d2b
Add files via upload
2023-01-31 13:55:23 -07:00
Bobby Cooke
134b5eeee6
Delete BokuLoader64.c
2023-01-31 13:55:12 -07:00
Bobby Cooke
69443cd87b
Update BokuLoader64.c
...
getApis() function added
2023-01-30 17:05:25 -07:00
Bobby Cooke
4398bc1c37
Update BokuLoader64.c
...
XGetProcAddress and getSymbolAddress enhancements
2023-01-30 17:01:27 -07:00
Bobby Cooke
c5b7cb0848
Update BokuLoader64.c
2022-07-29 20:39:21 -07:00
Bobby Cooke
a5f85b407b
Feature Update!
...
+ Added Detection Guidance + Stomp MZ Magic Bytes + Find-Self EggHunter + PE Header Obfuscation + PE String Replacement + Prepend ASM Instructions
2022-07-19 11:51:50 -07:00
Bobby Cooke
ccbe4e78a3
Feature Update!
...
+ Added Detection Guidance + Stomp MZ Magic Bytes + Find-Self EggHunter + PE Header Obfuscation + PE String Replacement + Prepend ASM Instructions
2022-07-08 11:46:03 -07:00
Bobby Cooke
7626500c1c
Update BokuLoader.cna
2022-07-08 11:42:00 -07:00
Bobby Cooke
292c00e2c4
Update BokuLoader.cna
2022-07-08 11:39:40 -07:00
Bobby Cooke
335980e6fd
Update README.md
2022-07-08 11:34:19 -07:00
Bobby Cooke
6cb1bce0bf
Update README.md
2022-07-08 11:30:43 -07:00
Bobby Cooke
6568b3bb5b
Feature Update!
...
+ Stomp MZ Magic Bytes
+ Find-Self EggHunter
+ PE Header Obfuscation
+ PE String Replacement
+ Prepend ASM Instructions
2022-07-08 10:31:14 -07:00
Bobby Cooke
13c0ea34a6
Add files via upload
2022-07-08 10:29:34 -07:00
Bobby Cooke
3ceb5767d1
Update README.md
2022-07-08 10:29:26 -07:00
Bobby Cooke
abc726f56b
Delete images directory
2022-07-08 10:22:48 -07:00
Bobby Cooke
e17ea4d6b2
Add files via upload
2022-07-08 10:22:29 -07:00
Bobby Cooke
f11a616887
Add files via upload
2022-07-08 10:22:20 -07:00
Bobby Cooke
93d086fbe6
Feature Update!
...
+ Stomp MZ Magic Bytes
+ Find-Self EggHunter
+ PE Header Obfuscation
+ PE String Replacement
+ Prepend ASM Instructions
2022-07-06 14:14:27 -07:00
Bobby Cooke
e49edbe2b3
Update BokuLoader64.c
2022-06-20 12:11:09 -07:00
Bobby Cooke
78e4723ab6
Update README.md
2022-06-09 16:02:05 -07:00
Bobby Cooke
f1bf734156
Add files via upload
2022-06-09 16:01:44 -07:00
Bobby Cooke
9b8b2a4472
Add files via upload
...
String Caesar Cipher
2022-06-09 16:00:06 -07:00
Bobby Cooke
a03eac4647
Add files via upload
2022-06-09 11:25:28 -07:00
Bobby Cooke
a7870adfd8
Update README.md
2022-06-09 11:13:16 -07:00