9fdd5c4438
Hash lookup changes
2022-06-17 10:48:02 -06:00
9bc5c58a30
Update ShellcodeRDI.c
2022-05-10 09:54:08 -06:00
e32abbe82e
Add support for passing the shellcode base address to the module export
...
Some cleanup and additional notes to the README
2022-05-09 16:57:34 -06:00
4aecf99235
Update build tools versions
2020-09-14 08:41:37 -06:00
783d530084
Migrated core function lookup to ntdll
2020-04-15 17:45:08 -06:00
1c402304d9
Added exception handling for x64
...
Updated GetProcAddressR for clarity
Added /EHa to the testdll with a divide by 0 for testing
2019-11-21 13:20:23 -07:00
94236228b7
Fix TLS callback issue (addesses are absolute). Rebuild blobs.
2019-10-10 15:07:26 -06:00
0bc9238e4d
Update blobs
2019-10-10 14:39:33 -06:00
75b7dfef21
Move relocation above IAT handling
2019-10-10 14:24:58 -06:00
c5dacf714c
Add new obfuscate_imports (0x4) flag
...
Finish refactor + fixes for x86 code.
Small code cleanup.
2019-09-26 16:49:05 -04:00
d939bae226
Huge re-factor of the base RDI code
2019-09-25 22:08:23 -04:00
d69a262a71
Add code patching so it's easy to update blobs in the future
...
Migrate EncodeBlobs.py to lib folder - might add a build step later
Removed some stale logic
2019-07-22 14:29:32 -06:00
1a0fc5050e
Move NtFlushInstructionCache above TLS callbacks
2019-06-10 10:58:49 -06:00
1ae7cf6c6b
Added TLS callbacks
...
Cleaned x86 bootstrap with proper stack frames
2019-01-10 17:25:07 -07:00
59b07c5c7d
Updated blobs
...
Remove code causing memset link
2019-01-10 17:25:06 -07:00
3ab9c81657
Add allocation for zero size sections
...
Clean some warnings
2019-01-10 17:25:06 -07:00
9de4ca7c60
Add allocation at preferred base address (Beacon short fix)
...
Added flag to clear memory after load (experimental)
2019-01-10 17:25:06 -07:00
b6ba50888f
Added 5th argument for arbitrary flags to RDI
...
Moved the clear header capability to the flags arg
Moved stack alignment from the C project to the bootstrap
Updated Python and Powershell conversion scripts (missed this last time)
2018-02-21 16:57:52 -07:00
bc72139f97
Remove uneeded typedefs
...
Linked up previously unused hash defines for function names
Added some sanity checks against the image (Memory Module)
Added page size alignment (Memory Module)
Updated memory allocations to set proper permissions instead of total RWX
Set the sRDI function to clear the majority of the DOS Header and Stub on load
2018-02-10 21:20:06 -08:00
1221d21e80
Surround paths with double-quote into PostBuildEvent
2017-10-05 16:52:48 +02:00
b64384e292
Remove ARM
2017-07-28 14:11:23 -06:00
d19ff41682
Initial Code
2017-07-28 14:00:59 -06:00
Nick Landers