Skip to content

A stealthy, assembly-based tool for secure function address resolution, offering a robust alternative to GetProcAddress.

License

Notifications You must be signed in to change notification settings

WKL-Sec/FuncAddressPro

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

7 Commits
 
 
 
 
 
 
 
 
 
 

Repository files navigation

FuncAddressPro

FuncAddressPro demonstrates a sophisticated method of using an external assembly file to dynamically retrieve function addresses, serving as an advanced alternative to the standard GetProcAddress. This approach, specifically designed to enhance stealth and security in software development, moves beyond conventional techniques as showcased in this Gist.

Building from Source

While FuncAddressPro includes a Makefile for building with mingw32-make.exe, you can also compile and link manually using the following commands:

clang++ -Wall -Wextra -std=c++17 -c main.cpp -o main.o
nasm -f win64 FindFunctionAddress.asm -o FindFunctionAddress.obj
clang++ -o Program.exe main.o FindFunctionAddress.obj

The output of the build process will be Program.exe.

Origin

This project is inspired by the content and teachings of the Offensive Development course offered by White Knight Labs. For more information on the course and to enhance your skills in offensive development, visit White Knight Labs Offensive Development Training.

About

A stealthy, assembly-based tool for secure function address resolution, offering a robust alternative to GetProcAddress.

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published