-
An 8-byte, null-padded UTF-8 encoded string. If the string is exactly 8 characters long, there is no terminating null. For longer names, this field contains a slash (/) that is followed by an ASCII re…
-
**Describe the bug**
Not sure if it's a bug or not, but once I backdoored a PE executable;, the PE still runs the Sliver shellcode, but never goes to the original EXE code. Making it of course very s…
-
I'm getting this error when I try to build my Class Library project.
```
The "StrongNamer.AddStrongName" task failed unexpectedly.
System.BadImageFormatException: Format of the executable (.exe) …
-
PE files (or generally other executable files, but let's stick to PE files in this ticket) do not necessarily need to conform to the PE specification in order to be loadable by Windows. There are ofte…
-
This Ticket for the implementation of support in APAF, to document and facilitate the signing of resulting PE executable with a X509v3 digital certificate following apple code signing guidelines https…
-
It may be worthwhile to considering modifying our representation of PE Optional Header data directories in the Windows Executable File Object. At the moment, we have separate elements under the DataDi…
-
Quoting the README:
> See how to support other types of IDAPython plugins besides just processor modules.
Loader plugins would be highly appreciated. The problem is that Python loaders are hard to…
-
![image](https://user-images.githubusercontent.com/110665654/183060391-1eef8987-d86e-4c62-a74d-7dcacb9b4716.png)
![image](https://user-images.githubusercontent.com/110665654/183060599-0440defb-62b5-4…
-
here is a rust binary that combines two zig programs with our surgical linker, and then `memexec`s the result:
[binary to reproduce](https://drive.google.com/file/d/1mi1QEYUF_vfT6wmvQvetU1DV9NrrP…
-
**Note from the teaching team:** This bug was reported during the _Part II (Evaluating Documents)_ stage of the PE. **You may reject this bug if it is not related to the quality of documentation.**
In…