admin/monoxgas-sRDI
1
0
Fork 0
mirror of https://github.com/monoxgas/sRDI synced 2026-06-06 16:14:36 +00:00
Code Issues Packages Projects Releases Wiki Activity
91 Commits 2 Branches 0 Tags
master
Commit Graph

91 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Nick Landers 9fdd5c4438 Hash lookup changes 2022-06-17 10:48:02 -06:00
Nick Landers 9bc5c58a30 Update ShellcodeRDI.c 2022-05-10 09:54:08 -06:00
Nick Landers e32abbe82e Add support for passing the shellcode base address to the module export 
Some cleanup and additional notes to the README
 2022-05-09 16:57:34 -06:00
hmsec 5690685aee Add arguments.output_format to ConvertToShellcode.py 2021-11-17 15:55:07 -07:00
Nick Landers 7889036a75 Revert bad path 2020-11-24 10:18:21 -07:00
Nick Landers 4841a2e868 Merge branch 'dev' 2020-09-14 09:14:08 -06:00
Nick Landers f2f6b64c53 Update PowerShell script. Fix file path bugs and exception handling 2020-09-14 09:13:58 -06:00
Nick Landers 9d6933cfa4 Merge branch 'dev' 2020-09-14 08:42:02 -06:00
Nick Landers 4aecf99235 Update build tools versions 2020-09-14 08:41:37 -06:00
Nick Landers 975da56ce5 Fixed ebx register use bug in 32 bit 2020-09-10 17:01:11 -06:00
Nick Landers f7cf7a6f7b Download .NET loader to 3.5 (additional) 2020-09-10 16:02:16 -06:00
Nick Landers 2fc1d05a27 Downgrade .NET loader to 3.5 2020-09-10 16:01:49 -06:00
Nick Landers a25c02965c Remove InteropTools class for NET loader 2020-09-10 15:37:49 -06:00
Nick Landers 783d530084 Migrated core function lookup to ntdll 2020-04-15 17:45:08 -06:00
Nick Landers 1c402304d9 Added exception handling for x64 
Updated GetProcAddressR for clarity
Added /EHa to the testdll with a divide by 0 for testing
 2019-11-21 13:20:23 -07:00
Nick Landers 50049db025 Small font size change 2019-11-07 16:38:45 -07:00
Nick Landers 2646b3380b Add alternatives to README 2019-11-07 16:37:47 -07:00
Nick Landers de3b577acc Remove PEFile project credit 2019-11-07 16:32:06 -07:00
Nick Landers 48d15f59d2 Merge branch 'dev' 2019-10-14 18:44:07 -06:00
Nick Landers 564933ff78 Cleaned up TestDLL project 2019-10-14 18:43:35 -06:00
Nick Landers b6fe113eeb Merge branch 'dev' 2019-10-10 15:07:40 -06:00
Nick Landers 94236228b7 Fix TLS callback issue (addesses are absolute). Rebuild blobs. 2019-10-10 15:07:26 -06:00
Nick Landers 83f51d3bba Merge branch 'dev' 
# Conflicts:
#	Python/ShellcodeRDI.py
 2019-10-10 14:40:56 -06:00
Nick Landers 0bc9238e4d Update blobs 2019-10-10 14:39:33 -06:00
Nick Landers 75b7dfef21 Move relocation above IAT handling 2019-10-10 14:24:58 -06:00
Nick Landers 7a31739ac1 Merge pull request #16 from coldfusion39/dev 
Add ObfuscateImport arguments to ConvertToShellcode.py
 2019-10-10 10:55:49 -06:00
coldfusion39 a82075759d Add ObfuscateImport arguments to ConvertToShellcode.py 2019-10-05 11:59:27 -04:00
Nick Landers eaf2f0b8ad Update ShellcodeRDI.py 
Quick small fix that's done in master, just hasn't been merged
 2019-09-27 16:16:50 -04:00
Nick Landers c1c76f0423 Add ObfuscateImports flag to ConvertTo-Shellcode 
Update README to reflect changes
 2019-09-26 17:40:44 -04:00
Nick Landers c5dacf714c Add new obfuscate_imports (0x4) flag 
Finish refactor + fixes for x86 code.
Small code cleanup.
 2019-09-26 16:49:05 -04:00
Nick Landers d939bae226 Huge re-factor of the base RDI code 2019-09-25 22:08:23 -04:00
Nick Landers 7317a9b086 Small manual fix that was corrected in the generator 2019-08-28 17:54:55 -06:00
Nick Landers 5c4fae4a9f Fix Python + EncodeBlobs bug 
Change to bytes
 2019-08-23 15:02:12 -06:00
Nick Landers 7e73a4285b Fix small offset error in is64BitDll 2019-07-31 12:57:42 -06:00
Nick Landers b2981d5e2f Add ROTR function hashing to DotNet code. 
Cleaned up is64BitDll dependencies in DotNet and converted to use simple offsets.
Cleaned lots of code from ConvertTo-Shellcode.ps1
Changed the ConvertTo-Shellcode function to take a function name as a string instead of a hash
Added a fixed copy of Matt Graeber's Invoke-Shellcode.ps1 to the repo
 2019-07-31 12:31:27 -06:00
Nick Landers d69a262a71 Add code patching so it's easy to update blobs in the future 
Migrate EncodeBlobs.py to lib folder - might add a build step later
Removed some stale logic
 2019-07-22 14:29:32 -06:00
Nick Landers 1a0fc5050e Move NtFlushInstructionCache above TLS callbacks 2019-06-10 10:58:49 -06:00
Nick Landers 71128b1ba3 Updated x86 stack frame code in posh, python, and .NET 
Added bootstrap size sanity check to python
 2019-01-10 17:36:39 -07:00
Nick Landers f2d0638a71 Merge branch 'dev' of https://github.com/monoxgas/sRDI into dev 
# Conflicts:
#	ShellcodeRDI/ShellcodeRDI.c
 2019-01-10 17:32:33 -07:00
Nick Landers 33127c2d3d Update Get-PEHeader 2019-01-10 17:25:07 -07:00
Nick Landers 1ae7cf6c6b Added TLS callbacks 
Cleaned x86 bootstrap with proper stack frames
 2019-01-10 17:25:07 -07:00
Nick Landers 141874723d Updated blobs in Posh script 2019-01-10 17:25:07 -07:00
Nick Landers 59b07c5c7d Updated blobs 
Remove code causing memset link
 2019-01-10 17:25:06 -07:00
Nick Landers 4d636bafa9 Add flags arg to function test 2019-01-10 17:25:06 -07:00
Nick Landers 3ab9c81657 Add allocation for zero size sections 
Clean some warnings
 2019-01-10 17:25:06 -07:00
Nick Landers 9de4ca7c60 Add allocation at preferred base address (Beacon short fix) 
Added flag to clear memory after load (experimental)
 2019-01-10 17:25:06 -07:00
Nick Landers 9114664f6f Powershell Speed Improvements 
Modified files read and buffer copies to improve speed quite a bit
 2018-07-26 19:19:37 -06:00
Nick Landers 1c3c67dc97 Updated blobs in Posh script 2018-05-27 21:04:13 -06:00
Nick Landers 8c9d5dc888 Updated blobs 
Remove code causing memset link
 2018-05-27 20:56:20 -06:00
Nick Landers fc67ccde43 Add flags arg to function test 2018-05-27 20:27:34 -06:00