boku7 / BokuLoader

A proof-of-concept Cobalt Strike Reflective Loader which aims to recreate, integrate, and enhance Cobalt Strike's evasion features!
MIT License
1.26k stars 244 forks source link

Add 32 bit support #7

Closed S4ntiagoP closed 2 years ago

S4ntiagoP commented 2 years ago

Hey there!

I added a few changes:

Given that I had to change a loot of code to make the 32-bit version work, I created a separate file.
Using only one file and separating arch-dependent code with #ifdef _WIN64 would make the file very hard to read, in my opinion.
The 32-bit version also supports syscalls, modifying Halo's gate for 32-bit was quite fun.
If you don't use syscalls, then the 32-bit version works in WoW64, which is pretty cool if you ask me 😛

Hope you like it!

boku7 commented 2 years ago

This is 🔥🔥🔥 epic work!!

S4ntiagoP commented 2 years ago

Wohoo