hub / github.com/chroblert/JSigThief
github.com/chroblert/JSigThief @v0.0.1
Chat with this repo
31 symbols
87 edges
22 files
8 documented · 26%
What it actually does AI analysis from the code graph — generated when you open this
loading…
README
JSigThief
介绍
原版是python语言编写的，现在用golang写一版SigThief, 本工具属于JBypass免杀系列的其中一个工具。
本工具实现了python版sigthief中的大部分功能，目前只支持对exe程序进行签名提权和添加...
使用
检查某程序是否有签名
jsigthief.exe check -i <具体文件路径>
导出已签名程序的数字签名
jsigthief.exe export -i <已签名文件路径> -o <导出路径>
向目标文件添加导出的数字签名
jsigthief.exe add -s <导出的.sig文件> -t <待添加签名的程序> -o <签名后输出路径>
直接偷取某程序的签名并添加到待签名的程序中
jsigthief.exe -i <带有数字签名的PE文件> -t <待签名的PE文件> -o <签名后的输出路径>
Core symbols most depended-on inside this repo
Parse
called by 4
utils/pe/parse.go
CheckIsSigned
called by 4
core/jsignature/check.go
FileCopy
called by 2
utils/file.go
readDataDirectories
called by 2
utils/pe/IMAGE_DATA_DIRECTORY.go
ExportSignature
called by 2
core/jsignature/export.go
parseIDH
called by 1
utils/pe/IMAGE_DOS_HEADER.go
parseJIFH
called by 1
utils/pe/IMAGE_FILE_HEADER.go
parseJIOH
called by 1
utils/pe/IMAGE_OPTIONAL_HEADER.go
Shape
Languages
Go100%
Modules by API surface
utils/pe/IMAGE_NT_HEADER32.go3 symbols
utils/pe/IMAGE_DOS_HEADER.go3 symbols
cmd/root.go3 symbols
utils/pe/parse.go2 symbols
utils/pe/IMAGE_FILE_HEADER.go2 symbols
utils/pe/IMAGE_DATA_DIRECTORY.go2 symbols
utils/pe/pe.go1 symbols
utils/pe/IMAGE_OPTIONAL_HEADER64.go1 symbols
utils/pe/IMAGE_OPTIONAL_HEADER32.go1 symbols
utils/pe/IMAGE_OPTIONAL_HEADER.go1 symbols
utils/pe/IMAGE_NT_HEADER64.go1 symbols
utils/hash/md5.go1 symbols
For agents
$ claude mcp add JSigThief \
-- python -m otcore.mcp_server <graph>