400f763a0b
AMSI patching
...
Novel technique that patches the g_amsiContext and AmsiScanBuffer global variables. It is not extensively tested. Use with care.
2025-12-10 12:04:11 +08:00
1780e0ac41
Subscriber Bit Patching signature update
...
Updated the signature to be compatible with older versions of clr.dll. Integrated into the BOF
2025-12-04 22:49:18 +08:00
14740195e0
Update SubscriberBitPatch.c
2025-12-04 22:19:14 +08:00
63ebe80043
README fixes
2025-12-03 14:34:39 +08:00
452d40dc56
Verbose logging fixes
2025-12-03 14:22:15 +08:00
ccd89f8ea7
Subscriber Bit Patching integration
...
Integration of the Subscriber Bit Patching technique into the BOF. Also properly unloads the sacrificial AppDomain before termination.
2025-12-03 13:11:28 +08:00
e6b0e1b455
Subscriber Bit Patching
...
some code snippets to perform the Subscriber Bit Patching technique. Not yet integrated into the BOF nor sufficiently tested.
2025-12-02 21:37:55 +08:00
b1f74b3a81
fixed crash
...
fixed a strange crash that occurs when using a more comprehensive capture.
logman create trace "DotNetFullTrace" -p "{e13c0d23-ccbc-4e12-931b-d9cc2eee27e4}" 0xFFFFFFFFFFFFFFFF 5 -o "C:\Users\root\Desktop\full_trace.etl" -ets
2025-12-01 01:57:25 +08:00
79b0a74d0f
Update README.md
2025-11-29 21:51:39 +08:00
5ba772f900
Initial commit
2025-11-29 16:37:28 +08:00
c42c6d4202
Initial commit
2025-11-29 16:35:09 +08:00
loland