Rework windows API - Githubissues

dobin / avred

Analyse your malware to surgically obfuscate it

https://avred.r00ted.ch

GNU General Public License v3.0

413 stars 45 forks source link

Closed dobin closed 2 years ago

dobin commented 2 years ago

Currently there are two or three windows APIs used:

arch_windows.c: Reflexxion system calls stubs (direct syscalls)
inject/: from go-inject, to perform process injection
syscalls/: from sliver, to perform sliver related stuff like donut shellcode injection

At least merge inject/ and syscalls/. Preferable replace with direct syscalls in pure go, if possible.

dobin commented 2 years ago

Wrong project...