9fdd5c4438
Hash lookup changes
2022-06-17 10:48:02 -06:00
e32abbe82e
Add support for passing the shellcode base address to the module export
...
Some cleanup and additional notes to the README
2022-05-09 16:57:34 -06:00
4aecf99235
Update build tools versions
2020-09-14 08:41:37 -06:00
975da56ce5
Fixed ebx register use bug in 32 bit
2020-09-10 17:01:11 -06:00
f7cf7a6f7b
Download .NET loader to 3.5 (additional)
2020-09-10 16:02:16 -06:00
2fc1d05a27
Downgrade .NET loader to 3.5
2020-09-10 16:01:49 -06:00
a25c02965c
Remove InteropTools class for NET loader
2020-09-10 15:37:49 -06:00
783d530084
Migrated core function lookup to ntdll
2020-04-15 17:45:08 -06:00
1c402304d9
Added exception handling for x64
...
Updated GetProcAddressR for clarity
Added /EHa to the testdll with a divide by 0 for testing
2019-11-21 13:20:23 -07:00
94236228b7
Fix TLS callback issue (addesses are absolute). Rebuild blobs.
2019-10-10 15:07:26 -06:00
0bc9238e4d
Update blobs
2019-10-10 14:39:33 -06:00
c5dacf714c
Add new obfuscate_imports (0x4) flag
...
Finish refactor + fixes for x86 code.
Small code cleanup.
2019-09-26 16:49:05 -04:00
d939bae226
Huge re-factor of the base RDI code
2019-09-25 22:08:23 -04:00
7e73a4285b
Fix small offset error in is64BitDll
2019-07-31 12:57:42 -06:00
b2981d5e2f
Add ROTR function hashing to DotNet code.
...
Cleaned up is64BitDll dependencies in DotNet and converted to use simple offsets.
Cleaned lots of code from ConvertTo-Shellcode.ps1
Changed the ConvertTo-Shellcode function to take a function name as a string instead of a hash
Added a fixed copy of Matt Graeber's Invoke-Shellcode.ps1 to the repo
2019-07-31 12:31:27 -06:00
d69a262a71
Add code patching so it's easy to update blobs in the future
...
Migrate EncodeBlobs.py to lib folder - might add a build step later
Removed some stale logic
2019-07-22 14:29:32 -06:00
71128b1ba3
Updated x86 stack frame code in posh, python, and .NET
...
Added bootstrap size sanity check to python
2019-01-10 17:36:39 -07:00
59b07c5c7d
Updated blobs
...
Remove code causing memset link
2019-01-10 17:25:06 -07:00
b6ba50888f
Added 5th argument for arbitrary flags to RDI
...
Moved the clear header capability to the flags arg
Moved stack alignment from the C project to the bootstrap
Updated Python and Powershell conversion scripts (missed this last time)
2018-02-21 16:57:52 -07:00
27f144d7c2
Updated solution/project relationships
...
Seperated DotNet project into x64 and x86
Remove post-build copy for debug on TestDLL
2018-02-21 16:53:15 -07:00
bc72139f97
Remove uneeded typedefs
...
Linked up previously unused hash defines for function names
Added some sanity checks against the image (Memory Module)
Added page size alignment (Memory Module)
Updated memory allocations to set proper permissions instead of total RWX
Set the sRDI function to clear the majority of the DOS Header and Stub on load
2018-02-10 21:20:06 -08:00
3bd566f9f7
Remove WriteLine in DotNetLoader
2017-08-01 16:40:45 -06:00
d19ff41682
Initial Code
2017-07-28 14:00:59 -06:00
Nick Landers