admin/monoxgas-sRDI
1
0
Fork 0
mirror of https://github.com/monoxgas/sRDI synced 2026-06-06 16:14:36 +00:00
Code Issues Packages Projects Releases Wiki Activity

Commit Graph

  • 9fdd5c4438 Hash lookup changes master Nick Landers 2022-06-17 10:48:02 -06:00
  • 9bc5c58a30 Update ShellcodeRDI.c Nick Landers 2022-05-10 09:54:08 -06:00
  • e32abbe82e Add support for passing the shellcode base address to the module export Some cleanup and additional notes to the README Nick Landers 2022-05-09 16:57:34 -06:00
  • 5690685aee Add arguments.output_format to ConvertToShellcode.py hmsec 2021-08-09 19:02:14 +04:00
  • 7889036a75 Revert bad path Nick Landers 2020-11-24 10:18:21 -07:00
  • 4841a2e868 Merge branch 'dev' Nick Landers 2020-09-14 09:14:08 -06:00
  • f2f6b64c53 Update PowerShell script. Fix file path bugs and exception handling dev Nick Landers 2020-09-14 09:13:58 -06:00
  • 9d6933cfa4 Merge branch 'dev' Nick Landers 2020-09-14 08:42:02 -06:00
  • 4aecf99235 Update build tools versions Nick Landers 2020-09-14 08:41:37 -06:00
  • 975da56ce5 Fixed ebx register use bug in 32 bit Nick Landers 2020-09-10 17:01:11 -06:00
  • f7cf7a6f7b Download .NET loader to 3.5 (additional) Nick Landers 2020-09-10 16:02:16 -06:00
  • 2fc1d05a27 Downgrade .NET loader to 3.5 Nick Landers 2020-09-10 16:01:49 -06:00
  • a25c02965c Remove InteropTools class for NET loader Nick Landers 2020-09-10 15:37:49 -06:00
  • 783d530084 Migrated core function lookup to ntdll Nick Landers 2020-04-15 17:45:08 -06:00
  • 1c402304d9 Added exception handling for x64 Updated GetProcAddressR for clarity Added /EHa to the testdll with a divide by 0 for testing Nick Landers 2019-11-21 13:20:23 -07:00
  • 50049db025 Small font size change Nick Landers 2019-11-07 16:38:45 -07:00
  • 2646b3380b Add alternatives to README Nick Landers 2019-11-07 16:37:47 -07:00
  • de3b577acc Remove PEFile project credit Nick Landers 2019-11-07 16:32:06 -07:00
  • 48d15f59d2 Merge branch 'dev' Nick Landers 2019-10-14 18:44:07 -06:00
  • 564933ff78 Cleaned up TestDLL project Nick Landers 2019-10-14 18:43:35 -06:00
  • b6fe113eeb Merge branch 'dev' Nick Landers 2019-10-10 15:07:40 -06:00
  • 94236228b7 Fix TLS callback issue (addesses are absolute). Rebuild blobs. Nick Landers 2019-10-10 15:07:26 -06:00
  • 83f51d3bba Merge branch 'dev' Nick Landers 2019-10-10 14:40:56 -06:00
  • 0bc9238e4d Update blobs Nick Landers 2019-10-10 14:39:33 -06:00
  • 75b7dfef21 Move relocation above IAT handling Nick Landers 2019-10-10 14:24:58 -06:00
  • 7a31739ac1 Merge pull request #16 from coldfusion39/dev Nick Landers 2019-10-10 10:55:49 -06:00
  • a82075759d Add ObfuscateImport arguments to ConvertToShellcode.py coldfusion39 2019-10-05 11:59:27 -04:00
  • eaf2f0b8ad Update ShellcodeRDI.py Nick Landers 2019-09-27 16:16:50 -04:00
  • c1c76f0423 Add ObfuscateImports flag to ConvertTo-Shellcode Update README to reflect changes Nick Landers 2019-09-26 17:40:44 -04:00
  • c5dacf714c Add new obfuscate_imports (0x4) flag Finish refactor + fixes for x86 code. Small code cleanup. Nick Landers 2019-09-26 16:49:05 -04:00
  • d939bae226 Huge re-factor of the base RDI code Nick Landers 2019-09-25 22:08:23 -04:00
  • 7317a9b086 Small manual fix that was corrected in the generator Nick Landers 2019-08-28 17:54:55 -06:00
  • 5c4fae4a9f Fix Python + EncodeBlobs bug Nick Landers 2019-08-23 15:02:12 -06:00
  • 7e73a4285b Fix small offset error in is64BitDll Nick Landers 2019-07-31 12:57:42 -06:00
  • b2981d5e2f Add ROTR function hashing to DotNet code. Cleaned up is64BitDll dependencies in DotNet and converted to use simple offsets. Cleaned lots of code from ConvertTo-Shellcode.ps1 Changed the ConvertTo-Shellcode function to take a function name as a string instead of a hash Added a fixed copy of Matt Graeber's Invoke-Shellcode.ps1 to the repo Nick Landers 2019-07-31 12:31:27 -06:00
  • d69a262a71 Add code patching so it's easy to update blobs in the future Migrate EncodeBlobs.py to lib folder - might add a build step later Removed some stale logic Nick Landers 2019-07-22 14:29:32 -06:00
  • 1a0fc5050e Move NtFlushInstructionCache above TLS callbacks Nick Landers 2019-06-10 10:58:49 -06:00
  • 71128b1ba3 Updated x86 stack frame code in posh, python, and .NET Added bootstrap size sanity check to python Nick Landers 2019-01-10 17:36:39 -07:00
  • f2d0638a71 Merge branch 'dev' of https://github.com/monoxgas/sRDI into dev Nick Landers 2019-01-10 17:32:33 -07:00
  • 33127c2d3d Update Get-PEHeader Nick Landers 2019-01-08 17:27:54 -07:00
  • 1ae7cf6c6b Added TLS callbacks Cleaned x86 bootstrap with proper stack frames Nick Landers 2019-01-08 17:03:49 -07:00
  • 141874723d Updated blobs in Posh script Nick Landers 2018-05-27 21:04:13 -06:00
  • 59b07c5c7d Updated blobs Remove code causing memset link Nick Landers 2018-05-27 20:56:20 -06:00
  • 4d636bafa9 Add flags arg to function test Nick Landers 2018-05-27 20:27:34 -06:00
  • 3ab9c81657 Add allocation for zero size sections Clean some warnings Nick Landers 2018-05-27 20:25:27 -06:00
  • 9de4ca7c60 Add allocation at preferred base address (Beacon short fix) Added flag to clear memory after load (experimental) Nick Landers 2018-05-27 20:14:14 -06:00
  • 9114664f6f Powershell Speed Improvements Nick Landers 2018-07-26 19:19:37 -06:00
  • 1c3c67dc97 Updated blobs in Posh script Nick Landers 2018-05-27 21:04:13 -06:00
  • 8c9d5dc888 Updated blobs Remove code causing memset link Nick Landers 2018-05-27 20:56:20 -06:00
  • fc67ccde43 Add flags arg to function test Nick Landers 2018-05-27 20:27:34 -06:00
  • 53d0d9164b Add allocation for zero size sections Clean some warnings Nick Landers 2018-05-27 20:25:27 -06:00
  • 57b3c7a352 Add allocation at preferred base address (Beacon short fix) Added flag to clear memory after load (experimental) Nick Landers 2018-05-27 20:14:14 -06:00
  • ddb53bffc2 Remove pefile library dependency Nick Landers 2018-03-12 12:56:29 -06:00
  • 1e4aa799fb Remove some trailing semi-colons in python Nick Landers 2018-02-24 18:15:29 -07:00
  • 27d34d7225 Update ReadMe Nick Landers 2018-02-21 17:03:04 -07:00
  • b6ba50888f Added 5th argument for arbitrary flags to RDI Moved the clear header capability to the flags arg Moved stack alignment from the C project to the bootstrap Nick Landers 2018-02-21 16:57:52 -07:00
  • 04e0e038d7 Added user data use for SayHello function Nick Landers 2018-02-21 16:53:59 -07:00
  • 27f144d7c2 Updated solution/project relationships Seperated DotNet project into x64 and x86 Remove post-build copy for debug on TestDLL Nick Landers 2018-02-21 16:53:15 -07:00
  • 59202ba08c Change sRDI blob to bytes from string Nick Landers 2018-02-11 17:29:04 -07:00
  • cc501b0553 Update ReadMe Nick Landers 2018-02-10 21:30:47 -08:00
  • bc72139f97 Remove uneeded typedefs Linked up previously unused hash defines for function names Added some sanity checks against the image (Memory Module) Added page size alignment (Memory Module) Updated memory allocations to set proper permissions instead of total RWX Set the sRDI function to clear the majority of the DOS Header and Stub on load Nick Landers 2018-02-10 21:20:06 -08:00
  • 8e49dd5b29 Added script for encoding sRDI blobs for embedding into other code Nick Landers 2018-02-10 21:17:04 -08:00
  • eff333353e Add program for testing sRDI/ExecutePayload function Nick Landers 2018-02-10 21:15:40 -08:00
  • fa4e7d5512 Fixed mismatched project/solution build platforms Nick Landers 2018-02-10 21:14:52 -08:00
  • ca9b88bcb3 Update Readme title Nick Landers 2017-10-27 00:24:18 -06:00
  • 40330af165 Fixed oversized function hash constants Nick Landers 2017-10-27 00:19:15 -06:00
  • 8bb991abff Merge pull request #7 from funoverip/master Nick Landers 2017-10-16 15:23:16 -06:00
  • 13c33d2195 Add python version check Nick Landers 2017-10-13 11:11:15 -06:00
  • ae4a8a620e Python: Non-ASCII character error in pefile.py Jerome 2017-10-12 14:16:05 +02:00
  • 2c5434c914 Merge pull request #5 from funoverip/master Nick Landers 2017-10-06 11:21:43 -06:00
  • 5f4c80e222 Making Out-Shellcode.ps1 compatible with PowerShell v2 funoverip 2017-10-05 16:59:02 +02:00
  • 1221d21e80 Surround paths with double-quote into PostBuildEvent funoverip 2017-10-05 16:52:48 +02:00
  • 65153e292e Merge pull request #2 from zeroSteiner/argparser Nick Landers 2017-08-04 16:45:03 -06:00
  • 1e1dd2ddf3 Change references from RDLL to DLL Spencer McIntyre 2017-08-02 20:03:14 -04:00
  • 56e7c9c417 Updated Readme Nick Landers 2017-08-02 18:01:32 -06:00
  • ac2974f77e Use the input_rdll argument from argparser Spencer McIntyre 2017-08-02 08:43:28 -04:00
  • ab6b57841d Remove WriteLine in PowerShell Nick Landers 2017-08-01 16:41:11 -06:00
  • 3bd566f9f7 Remove WriteLine in DotNetLoader Nick Landers 2017-08-01 16:40:45 -06:00
  • 3c0e706288 Use an argparser for the python implementation Spencer McIntyre 2017-08-01 09:58:18 -04:00
  • 295fdf6f56 Added PEFile to readme Nick Landers 2017-07-31 10:34:44 -06:00
  • 92f0207f0d Update License - RDI Nick Landers 2017-07-31 10:26:38 -06:00
  • c15e32fda2 Updated license - PIC_BindShell Nick Landers 2017-07-31 10:21:48 -06:00
  • d91fbe9c08 Spelling fixes Nick Landers 2017-07-29 16:12:00 -06:00
  • 99bcdbbe5e Recommendation added to readme Nick Landers 2017-07-29 16:04:48 -06:00
  • bcb07c01eb Another readme update Nick Landers 2017-07-29 16:01:54 -06:00
  • ab135744cb Updated ReadMe Nick Landers 2017-07-29 15:56:53 -06:00
  • eb0382a347 Seperated python into library and script Added powershell implementation Updated ReadMe Nick Landers 2017-07-29 15:54:51 -06:00
  • b64384e292 Remove ARM Nick Landers 2017-07-28 14:11:23 -06:00
  • cbd19211e8 Add Bin directory Nick Landers 2017-07-28 14:06:32 -06:00
  • d19ff41682 Initial Code Nick Landers 2017-07-28 14:00:59 -06:00
  • f9828d70d2 Initial commit Nick Landers 2017-07-28 13:30:53 -06:00