cob_258 Posted March 6, 2018 Share Posted March 6, 2018 Hi everyone, I wanted to know if the community consider it acceptable to use .net tools to write a patch or loader for native targets? I mean is it useful to develop .net classes/library that help in building patches/loaders for native targets? Link to comment Share on other sites More sharing options...
XenocodeRCE Posted March 6, 2018 Share Posted March 6, 2018 (edited) hey old friend you can extract value from non-managed sample using bea engine, in c# using this wrapper : https://github.com/carterjones/beaengine-cs you can runtime-patch values in memory using memory sharp : https://github.com/ZenLulz/MemorySharp i don't know for any lib that can patch non-managed file not at runtime yet. It would be excellent to have the equivalent of dnlib or mono.cecil for non-managed app, be sure a lot of people would help Edited March 6, 2018 by XenocodeRCE Link to comment Share on other sites More sharing options...
cob_258 Posted March 6, 2018 Author Share Posted March 6, 2018 Hi @XenocodeRCE how do you do? fine? The tools you linked seem interesting, I'll take a look in them; My question is about releasing patch/loader that uses .net code, i.e you need the .net framework to run a loader while the target doesn't need it, I asked this question because I was writing a loader in assembly (for a native target), the loader used some ReadProcessMemory/WriteProcessMemory to write 0xEB 0xFE on some adresses (to simulate BP since debug loop is harder to code/hide) and then I thought that this would be easier if I write it in C# in a way that the code is reusable (the only languages I know are assembly, c# and some Autoit) You talked about a native alternative for dnlib and mono, what exactly the library should do? I guess reading headers, read imports, fix dumps, add sections...etc or do you have other ideas? Link to comment Share on other sites More sharing options...
whoknows Posted March 6, 2018 Share Posted March 6, 2018 https://board.b-at-s.info/index.php?showtopic=9912 https://board.b-at-s.info/index.php?showtopic=9923 1 Link to comment Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now