Git/mgeeky-Penetration-Testing-Tools
1
0
Fork 0
mirror of https://github.com/mgeeky/Penetration-Testing-Tools.git synced 2025-04-05 01:04:07 +02:00
Code Issues Packages Projects Releases Wiki Activity

update

Browse Source
This commit is contained in:
Mariusz B. / mgeeky 2021-10-22 20:30:59 +02:00
parent dcadb41749
commit 0b283e7270
1 changed files with 6 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
windows/findSymbols.py
View File

@ -2,13 +2,12 @@
# #
# A script that enumerates Imports and Exports of PE files and prints them according to search criterias. # A script that enumerates Imports and Exports of PE files and prints them according to search criterias.
# #
# Let's the user find modules matching criterias such as: # Let's the user find imported/exported symbols matching criterias such as:
# - modules that are .NET ones # - symbol being import or export
# - modules of a big enough size / SizeOfImage / code section size # - symbol matching name
# - modules with enough room to fit shellcode for Module Stomping/DLL Hollowing purposes # - symbol NOT matching name
# (calculated as a difference of upper code section address and an entry point address) # - module matching name
# - modules present at the same time in System32 and SysWOW64 # - module NOT matching name
# - modules used / not used by any process as examined during the scan
# #
# Mariusz B. / mgeeky, '21 # Mariusz B. / mgeeky, '21
# <mb [at] binary-offensive.com> # <mb [at] binary-offensive.com>