Rasta Mouse

Feature Request: Enhanced Searching

1

Would it be possible to extract emails based on whether they've been flagged, or sent with high important etc?

[Bug] ListDirectory appears to fail when current working directory is drive root

5

**Feature Request or Bug** Bug **Describe the feature request or bug** `ls` seems to fail when the current working directory is set to the drive root. **To Reproduce** Steps to...

Feature Request: PowerShell Verbose Option

1

Excellent tool. Can we have an option for the PowerShell modules to be more verbose? i.e. print status messages much like the Python application does.

The main purpose of this PR was to add `FbGetSCCMAdmins` which reads the site administrative users from `SMS_Admin`. Example output: ``` [*] Action: Get SCCM Admins UserName: SCM-1\Administrator SID: S-1-5-21-303941143-420902481-3534137921-500...

FileNotFoundException in RewriteModuleIAT

4

I think this is meant to work? ```c# using DInvoke.DynamicInvoke; using DInvoke.ManualMap; using Data = DInvoke.Data; using System; namespace DInvokeTest { class Program { static void Main(string[] args) { var...

Initial draft for providing wrappers for `InitializeProcThreadAttributeList`, `InitializeProcThreadAttributeList` and `CreateProcess`. `DeleteProcThreadAttributeList` to follow. Feedback welcome - particularly interested in your option on issues like: https://github.com/rasta-mouse/DInvoke/blob/dev/DInvoke/DInvoke/DynamicInvoke/Win32.cs#L117-L120 I've currently abstracted `SECURITY_ATTRIBUTES` away...

I know this is an old project, but thought I'd highlight this issue anyway. ``` at PatchIat.ImportAddressTable.FindImportedModule(ProcessModule module, ImageImportDescriptor* descriptors, String importedModuleName) in D:\Tools\patch-iat\ImportAddressTable.cs:line 202 at PatchIat.ImportAddressTable.ApplyPatch[TFunction](ProcessModule module, String importedModule,...

Unable to resolve thread_handle from KERNEL32

9

``` PS C:\Tools\RunOF\RunOF\RunOF> .\bin\x64\Debug\RunOF.exe -f ..\..\demo_files\demo_bof.x64.o [*] Starting RunOF [x64] [=] [ParsedArgs:Void .ctor(System.String[])] Parsing 2 Arguments: -f ..\..\demo_files\demo_bof.x64.o [*] Loading object file ..\..\demo_files\demo_bof.x64.o [=] [BofRunner:Void .ctor(RunOF.Internals.ParsedArgs)] Initialising bof runner [=]...