search

bitdefender / bddisasm

bddisasm is a fast, lightweight, x86/x64 instruction decoder. The project also features a fast, basic, x86/x64 instruction emulator, designed specifically to detect shellcode-like behavior.
Apache License 2.0
875 stars 112 forks source link

A little advice #76

Closed icyfox168168 closed 1 year ago

icyfox168168 commented 2 years ago

Can it be extended to support external modules? Now the input range is limited, I use the entire exe image as the size, but for many external APIs, my current method is to call directly, get the data and return it to the analog structure, remove the limited range or select it, so that the details of each instruction can be grasped , including external APIs

icyfox168168 commented 2 years ago

There are many softwares that will apply for readable and writable memory and construct some code execution. If you find that the application memory has executable attributes or dynamically adjust the input inputsize, it will be perfect.

icyfox168168 commented 1 year ago

I haven't had time to test this library for a while. I really like this library when I have time