Grzegorz Rychlik
9df42c075f
Update channel development tutorial
2020-03-03 09:38:38 +01:00
Grzegorz Rychlik
91dc3a1163
Update zlib to 1.2.11-f690224aeb (from vcpkg)
2020-02-27 10:28:12 +01:00
Grzegorz Rychlik
2e27198936
Update build script
2020-02-25 14:25:13 +01:00
Grzegorz Rychlik
088d2d47b0
Downgrade ResourceGenerator to dotnet 2.1 (LTS) to match WebController
2020-02-24 16:12:52 +01:00
Grzegorz Rychlik
66c671c169
Merge branch 'CovenantIntegrationMerge' into RC1.1
2020-02-24 16:01:39 +01:00
Grzegorz Rychlik
f9122902bd
Remove artifact from Common.vcxitems.filters
2020-02-24 12:50:24 +00:00
Tim Carrington
98d1b8ff87
Update ChannelLinterUsage.md
2020-02-22 11:48:12 +00:00
Tim Carrington
749658ab6a
Add new file
2020-02-22 11:34:22 +00:00
Tim Carrington
98f269c13f
Update ShellcodeUsage.md
2020-02-22 11:30:52 +00:00
Tim Carrington
31351f9207
Upload New File
2020-02-22 11:30:17 +00:00
Tim Carrington
0c42fff0eb
Add new file
2020-02-22 11:29:08 +00:00
Tim Carrington
e119aff35b
Update CovenantUsage.md
2020-02-22 11:28:49 +00:00
Tim Carrington
95d5358f74
Update CovenantUsage.md
2020-02-22 11:28:24 +00:00
Tim Carrington
a4339e9fca
Update CovenantUsage.md
2020-02-22 11:27:49 +00:00
Tim Carrington
b8056b9e55
Update CovenantUsage.md
2020-02-22 11:26:48 +00:00
Tim Carrington
1ef17dc4bf
Update CovenantUsage.md
2020-02-22 11:26:00 +00:00
Tim Carrington
bc655949bc
Upload New File
2020-02-22 11:25:32 +00:00
Tim Carrington
94c6f1c80f
Upload New File
2020-02-22 11:25:17 +00:00
Tim Carrington
db146eb47a
Add new directory
2020-02-22 11:20:48 +00:00
Tim Carrington
f322516690
Add new file
2020-02-22 11:20:08 +00:00
Tim Carrington
311310e6d9
Update C2Integration.md
2020-02-22 10:57:05 +00:00
Tim Carrington
149d9567e2
Update C2Integration.md
2020-02-22 10:56:44 +00:00
Tim Carrington
9dcbe97c7f
Update C2Integration.md
2020-02-22 10:56:11 +00:00
Tim Carrington
de12108e4f
Update C2Integration.md
2020-02-22 10:51:11 +00:00
Tim Carrington
be177d0e23
Upload New File
2020-02-22 10:50:32 +00:00
Tim Carrington
363ab9797a
Update C2Integration.md
2020-02-22 10:50:12 +00:00
Tim Carrington
3271dc4c5d
Update C2Integration.md
2020-02-22 10:46:31 +00:00
Tim Carrington
9d3546cd89
Add new file
2020-02-22 10:45:03 +00:00
Tim Carrington
798e9f9ec8
Upload New File
2020-02-22 10:40:00 +00:00
tim.carrington
6a7f726f35
Merge branch 'CovenantIntegrationMerge' of git.f-secure.com:C3/C3 into CovenantIntegrationMerge
2020-02-21 09:51:38 +00:00
tim.carrington
f9018412be
update listening address for use with c2-bridge
2020-02-21 09:50:55 +00:00
Grzegorz Rychlik
727ee98f50
Merge branch 'Shellcode' into RC1.1
2020-02-19 15:20:02 +01:00
Grzegorz Rychlik
471ea7cc7a
Add detailed help to channel linter
2020-02-19 15:04:37 +01:00
Grzegorz Rychlik
e0b253f6aa
Improve capability parsing error messages and add command execution logging
2020-02-19 12:14:46 +01:00
Grzegorz Rychlik
a658af4e70
Better channel IO testing
2020-02-19 09:59:07 +01:00
Grzegorz Rychlik
22b15fc6e1
Better error message for missing form properties
2020-02-18 16:09:28 +01:00
Grzegorz Rychlik
3e9ca203c4
Add better error message for case typos
2020-02-18 15:54:09 +01:00
Grzegorz Rychlik
a57c7b8559
Wipe DOS and NT heades after loading
2020-02-18 14:15:57 +01:00
Grzegorz Rychlik
ec9a6cba21
Enable inline function expanstion for rwdi x86
2020-02-18 14:13:20 +01:00
Grzegorz Rychlik
c7a18cec0d
Merge branch 'Dotnet2.1'
2020-02-18 13:54:05 +01:00
Pawel Kurowski
3eb69d9780
Fix crash on shared_from_this
2020-02-07 17:37:32 +01:00
Grzegorz Rychlik
2262bf8f71
Downgrade WebController target framework to 2.1
2020-01-30 12:36:03 +01:00
Grzegorz Rychlik
af219394af
Detour GetModuleHandleExW function in x86
...
vcruntime dispatches tasks to Windows thread pool. When task finishes
the completion callback is invoked. In order to ensure the dll that
contais that callback code is still loaded, the refcount for the dll is
incremented (via GetModuleHandleExW) when task is scheduled, and
decremented (vie FreeLibrary) after callback finishes.
FreeLibrary called with a handle to unregistered module returns an
error, which is converted into unhandled exception and resulting in
crash.
2020-01-29 15:17:55 +01:00
Grzegorz Rychlik
ba5617a5e1
Exclude RtlPcToFileHeader hook from x86 builds
...
Exception info on x86 is absolute rather than relative (as x64) so
exception creation doesn't require this call.
Additionally Win8.1 SDK doesn't export `RtlPcToFileHeader` in
kernel32.lib for static linking, which causes linking to fail
2020-01-28 10:50:25 +01:00
Grzegorz Rychlik
f0e7ece23d
Hook RtlPcToFileHeader function
...
RtlPcToFileHeader is called when throwing exceptions, and creating
std::exception_ptrs.
Insert hook as import function address, not actual ntdll hook.
2020-01-27 17:07:29 +01:00
Grzegorz Rychlik
1775a3980a
Move Loader to separate file
2020-01-27 16:22:29 +01:00
Grzegorz Rychlik
820467f83b
Separarte PE image utils
2020-01-27 15:55:11 +01:00
Andras Toth
2f3052a5c1
yarn build
2020-01-23 10:48:43 +00:00
Andras Toth
3ce4693570
Enable EDIT CONFIG on create gateway
2020-01-23 10:45:39 +00:00
Grzegorz Rychlik
8df9c1f62a
Update Donut runtime libs
2020-01-22 13:30:15 +01:00