Morph MORPH
SIGN IN SIGN UP
dhruvhead / pe-sieve UNCLAIMED
0 0 1 C++

COMMITS

/ postprocessors/pe_buffer.h
stats
January 2, 2023
H
[FEATURE] In dump_report: report is_shellcode only if dumped material really contains code. Refact in code patterns scan
hasherezade committed
90f3167
September 4, 2021
H
[FEATURE] In imp_rec: set callback on found thunk. Filter out calls to the current module
hasherezade committed
7ad5574
July 30, 2021
H
[FEATURE] Pass info if working on process reflection. Use it to decide if can force read inaccessible mem.
hasherezade committed
ac0b609
April 19, 2021
H
[REFACT] In PeBuffer: store the base no matter if reading succeeded or failed
hasherezade committed
a7cc4df
June 14, 2020
H
[REFACT] Wrapped everything in pesieve namespace
hasherezade committed
d6aeca0
H
[BUGFIX] In PeBuffer, ModuleData: use calculated ImageSize if the size
hasherezade committed
908f38b
H
[REFACT] If ImageSize was not given in the report, use the calculated size
hasherezade committed
bb8c9f4
April 13, 2020
H
[REFACT] Moved generation of IAT report into IATScanReport
hasherezade committed
0e16960
April 12, 2020
H
[FEATURE] Make IAT Scan report independent from Import Recovery
hasherezade committed
939a36c
H
[FEATURE] In report about not recovered imports: show the name from import table
hasherezade committed
d41a04f
March 11, 2020
H
[REFACT] Changed handling uncovered imports
hasherezade committed
934ffbe
H
[FEATURE] Create a list of not recovered imports
hasherezade committed
4a4e0ff
December 30, 2019
H
[FEATURE] Preserve the relocBase found during the code scan, and use it during PE dumping
hasherezade committed
3a0137c
November 1, 2019
H
[BUGFIX] Updated libpeconv. Refactored PE-sieve to follow the changes in API
hasherezade committed
2acd40a
June 16, 2019
H
[BUGFIX] In dump path: use the module base from the buffer, not from the report.
hasherezade committed
c82b721
June 11, 2019
H
[REFACT] Re-read module from the memory if reconstruction failed. Refactored dumping shellcode.
hasherezade committed
6a89d2e
H
[REFACT] Changes in setting the dump paths. Remove 'rec' from the path of the reconstructed payload.
hasherezade committed
0dced94
June 8, 2019
H
[REFACT] Set ExportsMaper as const in functions that use it as lookup. Refactored function dumpAllModified.
hasherezade committed
bd2d941
H
[REFACT] Moved PeBuffer into separate files
hasherezade committed
cf5af4d