GithubHelp home page GithubHelp logo

Comments (8)

Martyx00 avatar Martyx00 commented on August 15, 2024

Hello, is it possible to share an example binary fike? Thanks.

from vulfi.

zhefox avatar zhefox commented on August 15, 2024

such as
image

image

The external link import function called by this method cannot be collected even if its name is specified in the custom rule

from vulfi.

Martyx00 avatar Martyx00 commented on August 15, 2024

If you can share the binary itself, please do so. Otherwise, I wll try to find some example myself. Thanks for reporting.

from vulfi.

zhefox avatar zhefox commented on August 15, 2024

you can use any system32/*.dll to test . Of course I can also give you a file
adllfile.zip

from vulfi.

zhefox avatar zhefox commented on August 15, 2024

oh ,I think I solved this problem, there is a problem with my rule rule, I can't directly "GetModuleHandleW", I need to give him the full name "__imp_GetModuleHandleW" in the .idata section

from vulfi.

zhefox avatar zhefox commented on August 15, 2024

        # For each import
        number_of_imports = idaapi.get_import_module_qty()
        for i in range(0, number_of_imports):
            idaapi.enum_import_names(i, imports_callback)

No wonder I found that you clearly wrote related methods when I checked your source code

from vulfi.

zhefox avatar zhefox commented on August 15, 2024

thanks!

from vulfi.

zhefox avatar zhefox commented on August 15, 2024

I will close my issue, thank you very much for your reply

from vulfi.

Related Issues (8)

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.