MCPcopy Create free account

hub / github.com/NetSPI/BOF-PE / functions

Functions391 in github.com/NetSPI/BOF-PE

⨍ Functions 391◇ Types & classes 155
↓ 16 callersMethoddata
loader/include/peplus/local_buffer.hpp:54
↓ 16 callersFunctionto_image_offset
loader/include/peplus/file_image.hpp:22
↓ 15 callersFunctionimage_do_read
loader/include/peplus/detail/image_helpers.hpp:29
↓ 13 callersMethodvalid
loader/Pe.hpp:557
↓ 11 callersMethodopt
loader/Pe.hpp:351
↓ 10 callersMethodbase
loader/Pe.hpp:562
↓ 10 callersMethoddescriptor
loader/Pe.hpp:1853
↓ 9 callersMethodheaders
loader/Pe.hpp:460
↓ 8 callersFunctionWriteInt
common/standalone.cpp:19
↓ 8 callersMethodoffset
loader/include/peplus/pointed_value.hpp:19
↓ 8 callersMethodtype
loader/Pe.hpp:552
↓ 7 callersMethodbegin
loader/include/peplus/detail/entry_range.hpp:108
↓ 7 callersMethodsize
loader/include/peplus/local_buffer.hpp:59
↓ 6 callersMethodcount
loader/Pe.hpp:2166
↓ 6 callersMethodexceptions
loader/Pe.hpp:2252
↓ 6 callersMethodindex
loader/Pe.hpp:791
↓ 6 callersMethodread
loader/include/peplus/detail/image_base.hpp:494
↓ 6 callersMethodread_string
loader/include/peplus/detail/image_base.hpp:464
↓ 6 callersMethodvalue
loader/include/peplus/detail/image_offset.hpp:118
↓ 5 callersMethodimageSize
loader/Pe.hpp:542
↓ 4 callersFunctionWriteString
common/standalone.cpp:39
↓ 4 callersMethodaddr
loader/Pe.hpp:1746
↓ 4 callersFunctionentry
tiny-pe/main.cpp:38
↓ 4 callersMethodnt
loader/Pe.hpp:346
↓ 4 callersMethodsections
loader/Pe.hpp:2213
↓ 3 callersFunctionBeaconPrintf
beacon/beacon.cpp:187
↓ 3 callersFunctionGetExceptionTables
loader/mappedmodule.cpp:169
↓ 3 callersMethoddata
loader/include/peplus/detail/facades/resource_directory_facade.hpp:184
↓ 3 callersMethodexports
loader/Pe.hpp:2240
↓ 3 callersMethodname
loader/Pe.hpp:816
↓ 3 callersFunctionswap_endianess
beacon/beacon.cpp:18
↓ 2 callersFunctionBeaconDataExtract
beacon/beacon.cpp:78
↓ 2 callersFunctionBeaconDataParse
beacon/beacon.cpp:40
↓ 2 callersFunctionFindLdrpInvertedFunctionTable
loader/mappedmodule.cpp:201
↓ 2 callersFunctionGetPackedArguments
common/standalone.cpp:96
↓ 2 callersFunctionReadFileAsString
common/standalone.cpp:66
↓ 2 callersMethodaddress
loader/Pe.hpp:1524
↓ 2 callersMethodcallback_mapped
loader/Pe.hpp:1970
↓ 2 callersMethoddata_directory
loader/include/peplus/detail/image_base.hpp:417
↓ 2 callersMethoddebugEntry
loader/Pe.hpp:2126
↓ 2 callersMethoddirectory
loader/Pe.hpp:516
↓ 2 callersMethodfunctions
loader/include/peplus/detail/facades/export_directory_facade.hpp:130
↓ 2 callersMethodimageBase
loader/Pe.hpp:537
↓ 2 callersMethodimportAddressTable
Import Address Table:
loader/Pe.hpp:900
↓ 2 callersFunctionis_export_forwarded
loader/include/peplus/detail/facades/export_directory_facade.hpp:95
↓ 2 callersMethodordinal
loader/Pe.hpp:1538
↓ 2 callersMethodreloc
loader/Pe.hpp:1740
↓ 1 callersFunctionAddExceptionSupport
loader/mappedmodule.cpp:359
↓ 1 callersFunctionBeaconInvokeStandalone
beacon/beacon.cpp:260
↓ 1 callersFunctionBeaconOutput
beacon/beacon.cpp:194
↓ 1 callersFunctionFindSection
loader/mappedmodule.cpp:159
↓ 1 callersFunctionLoadFile
https://stackoverflow.com/questions/51352863/what-is-the-idiomatic-c17-standard-approach-to-reading-binary-files
loader/main.cpp:52
↓ 1 callersFunctionProcessImports
loader/mappedmodule.cpp:67
↓ 1 callersFunctionProcessRelocations
loader/mappedmodule.cpp:108
↓ 1 callersFunctionReadFileData
common/standalone.cpp:84
↓ 1 callersFunctionRemoveExceptionSupport
loader/mappedmodule.cpp:374
↓ 1 callersFunctionResolveBeaconFunction
Typically each C2 provider will impement their own resolution method of beacon APIs. Beacuse our loader is a POC, we simply use the comatibility laye
loader/mappedmodule.cpp:51
↓ 1 callersFunctionReverse16
common/standalone.h:5
↓ 1 callersFunctionReverse32
common/standalone.h:9
↓ 1 callersFunctionRtlpDeleteInvertedFunctionTableEntry
loader/mappedmodule.cpp:320
↓ 1 callersFunctionRtlpInsertInvertedFunctionTableEntry
http://uninformed.org/index.cgi?v=8&a=2&p=20 Currently this only works for Windows 8+. The RTL_INVERTED_FUNCTION_TABLE memory layout is different for
loader/mappedmodule.cpp:266
↓ 1 callersFunctionTlsCallbacks
loader/mappedmodule.cpp:387
↓ 1 callersFunctionUpdateSectionPermissions
loader/mappedmodule.cpp:135
↓ 1 callersFunctionWriteBytes
common/standalone.cpp:29
↓ 1 callersFunctionWriteShort
common/standalone.cpp:24
↓ 1 callersMethodbegin
loader/Pe.hpp:2042
↓ 1 callersMethodbegin
loader/include/peplus/detail/transform_range.hpp:107
↓ 1 callersMethodbound
loader/Pe.hpp:911
↓ 1 callersMethodcontains
loader/Pe.hpp:1591
↓ 1 callersMethoddirectoryBase
loader/Pe.hpp:1271
↓ 1 callersMethodempty
loader/Pe.hpp:969
↓ 1 callersMethodend
loader/include/peplus/detail/transform_range.hpp:113
↓ 1 callersMethodend
loader/include/peplus/detail/entry_range.hpp:114
↓ 1 callersMethodfile_header
loader/include/peplus/detail/image_base.hpp:240
↓ 1 callersMethodfind
loader/Pe.hpp:1634
↓ 1 callersMethodforwarders
loader/Pe.hpp:1312
↓ 1 callersMethodimportAddressTableEntry
loader/Pe.hpp:796
↓ 1 callersMethodimportLookupTable
Import Lookup Table:
loader/Pe.hpp:906
↓ 1 callersMethodimportNameTable
Import Name Table:
loader/Pe.hpp:1120
↓ 1 callersMethodimports
loader/Pe.hpp:2222
↓ 1 callersMethodlibName
loader/Pe.hpp:894
↓ 1 callersMethodname_ordinals
loader/include/peplus/detail/facades/export_directory_facade.hpp:143
↓ 1 callersMethodnames
loader/include/peplus/detail/facades/export_directory_facade.hpp:117
↓ 1 callersMethodnt_headers
loader/include/peplus/detail/image_base.hpp:226
↓ 1 callersMethodordinalBase
loader/Pe.hpp:1619
↓ 1 callersMethodpage
loader/Pe.hpp:1793
↓ 1 callersFunctionprint_message
cpp-pe/main.cpp:23
↓ 1 callersFunctionread_base_relocation_from_image
loader/include/peplus/detail/facades/base_relocation_facade.hpp:70
↓ 1 callersFunctionread_export_directory_from_image
loader/include/peplus/detail/facades/export_directory_facade.hpp:76
↓ 1 callersFunctionread_import_descriptor_from_image
loader/include/peplus/detail/facades/import_descriptor_facade.hpp:116
↓ 1 callersFunctionread_resource_directory_entry_from_image
loader/include/peplus/detail/facades/resource_directory_facade.hpp:77
↓ 1 callersFunctionread_resource_directory_from_image
loader/include/peplus/detail/facades/resource_directory_facade.hpp:87
↓ 1 callersFunctionread_resource_string
loader/include/peplus/detail/facades/resource_directory_facade.hpp:109
↓ 1 callersFunctionread_runtime_function_from_image
loader/include/peplus/detail/facades/runtime_function_facade.hpp:69
↓ 1 callersFunctionread_unwind_info_from_image
loader/include/peplus/detail/facades/runtime_function_facade.hpp:80
↓ 1 callersMethodrelocs
loader/Pe.hpp:2246
↓ 1 callersMethodruntimeFunction
loader/Pe.hpp:1891
↓ 1 callersFunctionswap_endianess_short
beacon/beacon.cpp:30
↓ 1 callersFunctionthrow_message
cpp-pe/main.cpp:19
↓ 1 callersMethodtls
loader/Pe.hpp:2258
next →1–100 of 391, ranked by callers