Commit Graph

429 Commits (master)

Author SHA1 Message Date
Tim Carrington e119aff35b Update CovenantUsage.md 2020-02-22 11:28:49 +00:00
Tim Carrington 95d5358f74 Update CovenantUsage.md 2020-02-22 11:28:24 +00:00
Tim Carrington a4339e9fca Update CovenantUsage.md 2020-02-22 11:27:49 +00:00
Tim Carrington b8056b9e55 Update CovenantUsage.md 2020-02-22 11:26:48 +00:00
Tim Carrington 1ef17dc4bf Update CovenantUsage.md 2020-02-22 11:26:00 +00:00
Tim Carrington bc655949bc Upload New File 2020-02-22 11:25:32 +00:00
Tim Carrington 94c6f1c80f Upload New File 2020-02-22 11:25:17 +00:00
Tim Carrington db146eb47a Add new directory 2020-02-22 11:20:48 +00:00
Tim Carrington f322516690 Add new file 2020-02-22 11:20:08 +00:00
Tim Carrington 311310e6d9 Update C2Integration.md 2020-02-22 10:57:05 +00:00
Tim Carrington 149d9567e2 Update C2Integration.md 2020-02-22 10:56:44 +00:00
Tim Carrington 9dcbe97c7f Update C2Integration.md 2020-02-22 10:56:11 +00:00
Tim Carrington de12108e4f Update C2Integration.md 2020-02-22 10:51:11 +00:00
Tim Carrington be177d0e23 Upload New File 2020-02-22 10:50:32 +00:00
Tim Carrington 363ab9797a Update C2Integration.md 2020-02-22 10:50:12 +00:00
Tim Carrington 3271dc4c5d Update C2Integration.md 2020-02-22 10:46:31 +00:00
Tim Carrington 9d3546cd89 Add new file 2020-02-22 10:45:03 +00:00
Tim Carrington 798e9f9ec8 Upload New File 2020-02-22 10:40:00 +00:00
Grzegorz Rychlik 7417140f67 Fix member name qualifacation 2020-02-21 15:56:44 +01:00
Grzegorz Rychlik f43ba11206 Fix some clang compilation waringns 2020-02-21 15:56:43 +01:00
Grzegorz Rychlik 6ac4e2de75 Fix RouteId constructor 2020-02-21 15:56:43 +01:00
Grzegorz Rychlik c23fd1a123 [Clang] Fix NodeRelayConsoleExe 2020-02-21 15:54:16 +01:00
Grzegorz Rychlik 2493f27e90 Workaround the disallowed structutured binding capture 2020-02-21 15:54:16 +01:00
Grzegorz Rychlik 11e07bdf39 Change logger callback to accept string_view instead of pointer 2020-02-21 15:54:16 +01:00
Grzegorz Rychlik 3f2ddcc3e8 Fix ambiguous conversions, unqalified lookup and others 2020-02-21 15:54:16 +01:00
Grzegorz Rychlik d095870f2a [Clang] Fix the overly implicit conversions 2020-02-21 15:54:15 +01:00
Grzegorz Rychlik a5e517f9f2 Fix Query - related compilation warnings and errors 2020-02-21 15:54:15 +01:00
Grzegorz Rychlik 34c73a078a Update Byte containers 2020-02-21 15:54:15 +01:00
Grzegorz Rychlik 53df1570f6 Add inline and noexcept to basic_string specializations 2020-02-21 15:54:15 +01:00
Grzegorz Rychlik 793c6c3449 Update libsodium to 1.0.18 for clang support 2020-02-21 15:54:15 +01:00
tim.carrington 6a7f726f35 Merge branch 'CovenantIntegrationMerge' of git.f-secure.com:C3/C3 into CovenantIntegrationMerge 2020-02-21 09:51:38 +00:00
tim.carrington f9018412be update listening address for use with c2-bridge 2020-02-21 09:50:55 +00:00
Grzegorz Rychlik 727ee98f50 Merge branch 'Shellcode' into RC1.1 2020-02-19 15:20:02 +01:00
Grzegorz Rychlik 471ea7cc7a Add detailed help to channel linter 2020-02-19 15:04:37 +01:00
Grzegorz Rychlik e0b253f6aa Improve capability parsing error messages and add command execution logging 2020-02-19 12:14:46 +01:00
Grzegorz Rychlik a658af4e70 Better channel IO testing 2020-02-19 09:59:07 +01:00
Grzegorz Rychlik 22b15fc6e1 Better error message for missing form properties 2020-02-18 16:09:28 +01:00
Grzegorz Rychlik 3e9ca203c4 Add better error message for case typos 2020-02-18 15:54:09 +01:00
Grzegorz Rychlik a57c7b8559 Wipe DOS and NT heades after loading 2020-02-18 14:15:57 +01:00
Grzegorz Rychlik ec9a6cba21 Enable inline function expanstion for rwdi x86 2020-02-18 14:13:20 +01:00
Grzegorz Rychlik c7a18cec0d Merge branch 'Dotnet2.1' 2020-02-18 13:54:05 +01:00
Pawel Kurowski 3eb69d9780 Fix crash on shared_from_this 2020-02-07 17:37:32 +01:00
Grzegorz Rychlik 2262bf8f71 Downgrade WebController target framework to 2.1 2020-01-30 12:36:03 +01:00
Grzegorz Rychlik af219394af Detour GetModuleHandleExW function in x86
vcruntime dispatches tasks to Windows thread pool. When task finishes
the completion callback is invoked. In order to ensure the dll that
contais that callback code is still loaded, the refcount for the dll is
incremented (via GetModuleHandleExW) when task is scheduled, and
decremented (vie FreeLibrary) after callback finishes.

FreeLibrary called with a handle to unregistered module returns an
error, which is converted into unhandled exception and resulting in
crash.
2020-01-29 15:17:55 +01:00
Grzegorz Rychlik ba5617a5e1 Exclude RtlPcToFileHeader hook from x86 builds
Exception info on x86 is absolute rather than relative (as x64) so
exception creation doesn't require this call.

Additionally Win8.1 SDK doesn't export `RtlPcToFileHeader` in
kernel32.lib for static linking, which causes linking to fail
2020-01-28 10:50:25 +01:00
Grzegorz Rychlik f0e7ece23d Hook RtlPcToFileHeader function
RtlPcToFileHeader is called when throwing exceptions, and creating
std::exception_ptrs.
Insert hook as import function address, not actual ntdll hook.
2020-01-27 17:07:29 +01:00
Grzegorz Rychlik 1775a3980a Move Loader to separate file 2020-01-27 16:22:29 +01:00
Grzegorz Rychlik 820467f83b Separarte PE image utils 2020-01-27 15:55:11 +01:00
Andras Toth 2f3052a5c1 yarn build 2020-01-23 10:48:43 +00:00
Andras Toth 3ce4693570 Enable EDIT CONFIG on create gateway 2020-01-23 10:45:39 +00:00