Commit Graph

10 Commits

Author SHA1 Message Date
Nick Landers 7e73a4285b Fix small offset error in is64BitDll 2019-07-31 12:57:42 -06:00
Nick Landers b2981d5e2f Add ROTR function hashing to DotNet code.
Cleaned up is64BitDll dependencies in DotNet and converted to use simple offsets.
Cleaned lots of code from ConvertTo-Shellcode.ps1
Changed the ConvertTo-Shellcode function to take a function name as a string instead of a hash
Added a fixed copy of Matt Graeber's Invoke-Shellcode.ps1 to the repo
2019-07-31 12:31:27 -06:00
Nick Landers d69a262a71 Add code patching so it's easy to update blobs in the future
Migrate EncodeBlobs.py to lib folder - might add a build step later
Removed some stale logic
2019-07-22 14:29:32 -06:00
Nick Landers 71128b1ba3 Updated x86 stack frame code in posh, python, and .NET
Added bootstrap size sanity check to python
2019-01-10 17:36:39 -07:00
Nick Landers 141874723d Updated blobs in Posh script 2019-01-10 17:25:07 -07:00
Nick Landers 9114664f6f Powershell Speed Improvements
Modified files read and buffer copies to improve speed quite a bit
2018-07-26 19:19:37 -06:00
Nick Landers b6ba50888f Added 5th argument for arbitrary flags to RDI
Moved the clear header capability to the flags arg
Moved stack alignment from the C project to the bootstrap

Updated Python and Powershell conversion scripts (missed this last time)
2018-02-21 16:57:52 -07:00
Nick Landers 40330af165 Fixed oversized function hash constants 2017-10-27 00:19:15 -06:00
Nick Landers ab6b57841d Remove WriteLine in PowerShell 2017-08-01 16:41:11 -06:00
Nick Landers eb0382a347 Seperated python into library and script
Added powershell implementation
Updated ReadMe
2017-07-29 15:54:51 -06:00