admin/williamknows-CodeCoverageModuleStomping
1
0
Fork 0
mirror of https://github.com/williamknows/CodeCoverageModuleStomping synced 2026-06-08 18:18:52 +00:00
Code Issues Packages Projects Releases Wiki Activity

Update and rename README.md to Update readme

Browse Source
This commit is contained in:
William Knowles
2020-01-08 07:05:48 +00:00
committed by GitHub
parent d12cada479
commit b3a80a3330
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
README.md → Update readme
+2 -2
View File
@@ -2,10 +2,10 @@
Tools to support code coverage based module stomping. Based on the blog post: http://williamknowles.io/?p=14
parse-drcov-identify-untouched.py - analyses DynamoRIO's drcov output. Run the script as follows, with the argument being the drcov output file.
parse-drcov-identify-untouched.py - analyses DynamoRIO's drcov output. Run the script as follows, with the argument being the drcov output file. It's Python3 with the only non-standard dependency being PrettyTable.
```
parse-drcov-identify-untouched.py drcov.mspaint.exe.11520.0000.proc-win10-beacon.log
python3 parse-drcov-identify-untouched.py drcov.mspaint.exe.11520.0000.proc-win10-beacon.log
```
CodeCoverageModuleStomping - a simple C++ project for testing injecting into the memory regions of an already loaded module (DLL) at a particular offset. Shellcode should be included in the only header file of the project. It's designed for testing on Windows 10 and sets up call targets for Control Flow Guard (CFG); if you want to run this on older operating systems you'll probably need to comment this section of code out. Run the compiled binary as follows: