klezVirus

Results 34 comments of klezVirus

Hi @bestrocker221, I am aware of this issue, and I'm working on to solve it. Give me some time to solve it and I'll come back to you. Thanks a...

Hi @Revozop, yes, I'm afraid donut also need to be customised. "Assembly" is a wrapper to load the binary using .NET `Assembly.Load(byte[])` method. You can use it, but it will...

Hi @axano, thanks for that. This is an issue with how SigThief works. It seems to me that the signature cloning is not applying only the signature to the output...

Hi @rundro, the issue you're getting is due to the lack of a default syscall based template for self-injection or code-execution (whatever you want to call it). Indeed, as you...

Hi @bestrocker221, thanks for that. Fixed by [159e22622542b915c4b83ca1e2dcf30ac481adc9](https://github.com/klezVirus/inceptor/commit/159e22622542b915c4b83ca1e2dcf30ac481adc9). On a side note, consider that the shellcode retrieval module implementaion broke the `chain-validate.py` utility in the dev branch.

Hi @bestrocker221, zlib operates on bytes, while hex transforms the shellcode into string format, this is why you can't use it in the hex -> zlib order. I'll try to...

Hi @0xElessar, thanks for the continous testing, it is very precious. So, let's come to your points one by one: - Oflline signing: Should be fixed in dev branch -...

Hi @wgetnz, thanks for reporting this. May I ask you to give me a reference link / example on how to force use of MCF?

Thanks @bestrocker221, it's really appreciated! I'm working on this tool alone, and in my spare time only, unfortunately. This is why I'm struggling to implement all the things that I...

Strange, a warning shouldn't stop the compilation. Do you also see any error?