Exetools  

Go Back   Exetools > General > Source Code

Notices

Reply
 
Thread Tools Display Modes
  #1  
Old 09-20-2021, 09:08
chants chants is offline
VIP
 
Join Date: Jul 2016
Posts: 826
Rept. Given: 47
Rept. Rcvd 50 Times in 31 Posts
Thanks Given: 737
Thanks Rcvd at 1,140 Times in 529 Posts
chants Reputation: 51
This is not PHP code but C code. Also hardcoding the string locations is not really a good way to go as this will not be platform, compiler or linker independent. Win7 vs Win10, MSVC 14 vs 16, gcc vs MSVC, etc. One idea is to instead generate a symbol file e.g. PDB that contains the symbols with the string offsets, or at least search the file for the marker strings. 50 bytes for URL and path is ok for PoC but not practical.
Reply With Quote
  #2  
Old 09-20-2021, 17:49
YANiS YANiS is offline
Guest
 
Join Date: Sep 2021
Posts: 2
Rept. Given: 0
Rept. Rcvd 0 Times in 0 Posts
Thanks Given: 0
Thanks Rcvd at 5 Times in 2 Posts
YANiS Reputation: 0
Quote:
Originally Posted by chants View Post
This is not PHP code but C code. Also hardcoding the string locations is not really a good way to go as this will not be platform, compiler or linker independent. Win7 vs Win10, MSVC 14 vs 16, gcc vs MSVC, etc. One idea is to instead generate a symbol file e.g. PDB that contains the symbols with the string offsets, or at least search the file for the marker strings. 50 bytes for URL and path is ok for PoC but not practical.
The main purpose of this snippet is to try to build smallest! as possible working binary with MSVC compiler/Linker (GUI - API).
Also get (produce) a clean assembly to trace and understand easily!
It's a very basic PoC for only learning purpose.

YANiS.
Reply With Quote
The Following 4 Users Say Thank You to YANiS For This Useful Post:
chants (09-26-2021), niculaita (09-21-2021), TeRcO (02-20-2023), tonyweb (10-24-2021)
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is On


Similar Threads
Thread Thread Starter Forum Replies Last Post
Tiny Obfuscate [C++] CarrotStickCam Community Tools 5 11-12-2022 04:17
Obfuscation - Proof of concept auroras General Discussion 8 04-13-2005 21:41


All times are GMT +8. The time now is 19:56.


Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX, chessgod101
( Since 1998 )