#1
|
|||
|
|||
QLoader - Quickly create a non-exe loader for application
Howdy, friends.
Today, I would like to share with you guys a RE tool named QLoader @ https://github.com/vic4key/QLoader.git QLoader is a PE loader creator that helps you quickly create a non-exe loader for application. Features
GUI Screenshot @ https://github.com/vic4key/QLoader/b...enshots/ui.png Tutorial Video on Youtube @ https://youtu.be/nzyHh1CzNLM Note: Remember to turn on sub-title (CC) when watching More details, screenshots, or single executable (inside the bin folder) can be found in the GitHub repo @ https://github.com/vic4key/QLoader.git Regards, Vic P. Last edited by vic4key; 07-02-2022 at 17:57. |
The Following 3 Users Gave Reputation+1 to vic4key For This Useful Post: | ||
The Following 11 Users Say Thank You to vic4key For This Useful Post: | ||
#2
|
|||
|
|||
Released v1.1 with "Support to define `offset` field in both decimal and heximal number" @ https://github.com/vic4key/QLoader/releases/tag/v1.1
P.S Please don't use JSON files from version 1.0, let download & use new JSON files from version 1.1. If not, crash will be occurred. Last edited by vic4key; 07-04-2022 at 09:45. |
The Following 4 Users Say Thank You to vic4key For This Useful Post: | ||
MarcElBichon (07-03-2022), nikkapedd (07-04-2022), wilson bibe (07-04-2022), Zeokat (07-03-2022) |
#3
|
||||
|
||||
Really interesting trick. Curious to know the details of the produced files. Thanks !
__________________
Ŝħůb-Ňìĝùŕřaŧħ ₪) There are only 10 types of people in the world: Those who understand binary, and those who don't http://www.accessroot.com |
#4
|
|||
|
|||
Quote:
1. QLoader uses a JSON pattern file to generate a shortcut file (.LNK/.URL) or HTML hyperlink <a> tag (then you can upload the generated shortcut for sharing). 2. Required QLoader installed in machine (Its role is a parser & handler). |
#5
|
|||
|
|||
nice one,just a question about offset,an example with sublime_text patch,they are plenty of 80 38 00 on the trial I've downloaded so,is the offset mean the first sequence found to patch with FE 00 90?
""pattern": "80 38 00","replacement": "FE 00 90","offset": 0
__________________
I like this forum! |
#6
|
|||
|
|||
Quote:
I refer my answer here, hope this help you. The answer @ https://forum.tuts4you.com/topic/436...comment=212361 P.S For quick, so I refer the link here. Sorry for not answer you directly. |
#7
|
|||
|
|||
Quote:
"Additionally, for each pattern, it just patches the first match address only. Not all matches. So the pattern should be unique"
__________________
I like this forum! |
Thread Tools | |
Display Modes | |
|
|