mirror of
https://github.com/susMdT/AceLdr
synced 2026-06-08 17:38:55 +00:00
Kyle Avery
30 lines
980 B
Python
30 lines
980 B
Python
#!/usr/bin/env python3
|
|
# -*- coding:utf-8 -*-
|
|
|
|
#
|
|
# https://github.com/SecIdiot/TitanLdr/blob/master/python3/extract.py
|
|
#
|
|
|
|
import pefile
|
|
import argparse
|
|
|
|
if __name__ in '__main__':
|
|
try:
|
|
parser = argparse.ArgumentParser( description = 'Extracts shellcode from a PE.' );
|
|
parser.add_argument( '-f', required = True, help = 'Path to the source executable', type = str );
|
|
parser.add_argument( '-o', required = True, help = 'Path to store the output raw binary', type = str );
|
|
option = parser.parse_args();
|
|
|
|
PeExe = pefile.PE( option.f );
|
|
PeSec = PeExe.sections[0].get_data();
|
|
|
|
if PeSec.find( b'ACELDR' ) != None:
|
|
ScRaw = PeSec[ : PeSec.find( b'ACELDR' ) ];
|
|
f = open( option.o, 'wb+' );
|
|
f.write( ScRaw );
|
|
f.close();
|
|
else:
|
|
print('[!] error: no ending tag');
|
|
except Exception as e:
|
|
print( '[!] error: {}'.format( e ) );
|