9fdd5c4438
Hash lookup changes
2022-06-17 10:48:02 -06:00
e32abbe82e
Add support for passing the shellcode base address to the module export
...
Some cleanup and additional notes to the README
2022-05-09 16:57:34 -06:00
5690685aee
Add arguments.output_format to ConvertToShellcode.py
2021-11-17 15:55:07 -07:00
975da56ce5
Fixed ebx register use bug in 32 bit
2020-09-10 17:01:11 -06:00
783d530084
Migrated core function lookup to ntdll
2020-04-15 17:45:08 -06:00
1c402304d9
Added exception handling for x64
...
Updated GetProcAddressR for clarity
Added /EHa to the testdll with a divide by 0 for testing
2019-11-21 13:20:23 -07:00
94236228b7
Fix TLS callback issue (addesses are absolute). Rebuild blobs.
2019-10-10 15:07:26 -06:00
0bc9238e4d
Update blobs
2019-10-10 14:39:33 -06:00
a82075759d
Add ObfuscateImport arguments to ConvertToShellcode.py
2019-10-05 11:59:27 -04:00
eaf2f0b8ad
Update ShellcodeRDI.py
...
Quick small fix that's done in master, just hasn't been merged
2019-09-27 16:16:50 -04:00
c5dacf714c
Add new obfuscate_imports (0x4) flag
...
Finish refactor + fixes for x86 code.
Small code cleanup.
2019-09-26 16:49:05 -04:00
d939bae226
Huge re-factor of the base RDI code
2019-09-25 22:08:23 -04:00
d69a262a71
Add code patching so it's easy to update blobs in the future
...
Migrate EncodeBlobs.py to lib folder - might add a build step later
Removed some stale logic
2019-07-22 14:29:32 -06:00
71128b1ba3
Updated x86 stack frame code in posh, python, and .NET
...
Added bootstrap size sanity check to python
2019-01-10 17:36:39 -07:00
59b07c5c7d
Updated blobs
...
Remove code causing memset link
2019-01-10 17:25:06 -07:00
ddb53bffc2
Remove pefile library dependency
2018-03-12 12:56:29 -06:00
1e4aa799fb
Remove some trailing semi-colons in python
2018-02-24 18:15:29 -07:00
b6ba50888f
Added 5th argument for arbitrary flags to RDI
...
Moved the clear header capability to the flags arg
Moved stack alignment from the C project to the bootstrap
Updated Python and Powershell conversion scripts (missed this last time)
2018-02-21 16:57:52 -07:00
59202ba08c
Change sRDI blob to bytes from string
2018-02-11 17:29:04 -07:00
bc72139f97
Remove uneeded typedefs
...
Linked up previously unused hash defines for function names
Added some sanity checks against the image (Memory Module)
Added page size alignment (Memory Module)
Updated memory allocations to set proper permissions instead of total RWX
Set the sRDI function to clear the majority of the DOS Header and Stub on load
2018-02-10 21:20:06 -08:00
8e49dd5b29
Added script for encoding sRDI blobs for embedding into other code
2018-02-10 21:17:04 -08:00
8bb991abff
Merge pull request #7 from funoverip/master
...
Python: Non-ASCII character error in pefile.py
2017-10-16 15:23:16 -06:00
13c33d2195
Add python version check
2017-10-13 11:11:15 -06:00
ae4a8a620e
Python: Non-ASCII character error in pefile.py
2017-10-12 14:16:05 +02:00
1e1dd2ddf3
Change references from RDLL to DLL
2017-08-02 20:03:14 -04:00
ac2974f77e
Use the input_rdll argument from argparser
2017-08-02 08:43:28 -04:00
3c0e706288
Use an argparser for the python implementation
2017-08-01 09:58:18 -04:00
eb0382a347
Seperated python into library and script
...
Added powershell implementation
Updated ReadMe
2017-07-29 15:54:51 -06:00
d19ff41682
Initial Code
2017-07-28 14:00:59 -06:00
Nick Landers