[Update]
Added additional debug stacktrace statements when writing to CSV files.
[New]
IncludedExamples.md
in the distribution archive.[New]
As command line arguments were becoming too much, createdCommandLineGenerator.html
.[New]
Implement thesign
mode, to enable creating self-signed certificates and using any given certificate to sign an executable/DLL. The code was taken & customised from https://github.com/Danielku15/SigningServer, under MIT License - original author is Danielku15.[Fix]
Fixed PostBuildEvent in proxy.vcxproj, PR by https://github.com/Signum21.[Fix]
Fixed placeholder creation when DLL does not exist, PR by https://github.com/kost.
[Update]
Proxy--action exports
now supports wildcard DLL paths like--dll C:\Windows\System32\*.dll
and also displays forwarded functions.[Fix]
Rewrite PE file exporter from scratch.
[New]
Added--action exports
to--mode proxy
that lists a file's exports, functionality similar todumpbin.exe /exports
.[Fix]
Fixed--only
parameter which was ignored when generating a proxy solution without using Ghidra.
[Update]
Added support forNTAPI
prototypes.
[New]
Added--action prototypes
to--mode proxy
that supports the parsing of*.h
files in order to generate pre-existing function prototypes.[New]
Included./Assets/prototypes.csv
with a pre-generated list of function prototypes.[Update]
Updated--mode com --acl
functionality to check the parent folder's permissions as well when checking for misconfigured COM registry entries.
[New]
Implement support for identifying COM Hijacking.[New]
Added option to support external resources for solution generation.[Update]
Improve Visual Studio solution generation.[Update]
Simplified and reduced command line arguments.[Removed]
Removed the individual*.cpp
proxy skeleton file generation, replaced with full solutions.
[New]
Implement replication ofVERSIONINFO
and timestomping to match source file during solution compilation. (Issue #1)
[Fix]
Allow digits/symbols in --only-proxy command
[New]
Implement new functionality to create proxies for functions other than DllMain, as described here: https://www.redteam.cafe/red-team/dll-sideloading/dll-sideloading-not-by-dllmain
[New]
Public Release.