From 2a24e6d2aefc2f5c89b11313051a825b9a88ba76 Mon Sep 17 00:00:00 2001 From: Ren <43288246+Sam839@users.noreply.github.com> Date: Fri, 5 Nov 2021 01:31:29 +0700 Subject: [PATCH] Update README.md --- README.md | 29 +++++++++++++++++------------ 1 file changed, 17 insertions(+), 12 deletions(-) diff --git a/README.md b/README.md index fd4bb49..7dfc3dd 100644 --- a/README.md +++ b/README.md @@ -1,31 +1,36 @@ # RenJack -Renard Injector (PE section injection) +Renard Injector (PE section injection with hooks) # Principle of operation -1. Creates and embeds two sections. -2. Fills the `.rxtext` section with NOP instructions. -3. Places the jump to the entry point at the end of the section. -4. Changes the original entry point to the beginning of the section. -5. If the payload parameters are marked, then the payload is placed at the beginning of the section. +1. Creates and embeds two/three sections. +2. Creates `.rxhooks` for hooks. (if /hookexports is active) +3. Creates `.rxdata` for custom data. +4. Fills the `.rxtext` section with NOP instructions. +5. Places the jump to the entry point at the end of the section. +6. Changes the original entry point to the beginning of the section. +7. If the payload parameters are marked, then the payload is placed at the beginning of the section. # Usage ``` > RenJack -RenJack by Ren (zeze839@gmail.com) [Version 1.0.0.1] +RenJack by Ren (zeze839@gmail.com) [Version 2.2] -[!] Warning: Usage: RenJack [/verbose:] [/maxdatasize:] [/maxcodesize:] [/disabledep] [/disableaslr] [/forceguardcf] [/noentrypoint] [/input:] [/payload:] [/savepayload] [/outputpayload:] [/output:] +[!] Warning: Usage: RenJack [/verbose:] [/maxdatasize:] [/maxcodesize:] [/disabledep] [/disableaslr] [/forceguardcf] [/noentrypoint] [/hookexports] [/hooksize:] [/hookalign:] [/input:] [/payload:] [/savepayload] [/outputpayload:] [/output:] ``` ``` > RenJack /? -RenJack by Ren (zeze839@gmail.com) [Version 1.0.0.1] +RenJack by Ren (zeze839@gmail.com) [Version 2.2] -[!] Warning: Usage: RenJack [/verbose:] [/maxdatasize:] [/maxcodesize:] [/disabledep] [/disableaslr] [/forceguardcf] [/noentrypoint] [/input:] [/payload:] [/savepayload] [/outputpayload:] [/output:] +[i] Usage: RenJack32 [/verbose:] [/maxdatasize:] [/maxcodesize:] [/disabledep] [/disableaslr] [/forceguardcf] [/noentrypoint] [/hookexports] [/hooksize:] [/hookalign:] [/input:] [/payload:] [/savepayload] [/outputpayload:] [/output:] /verbose: - Verbosity level. - /maxdatasize - Maximum `.rxdata` size. (Default: 4096) - /maxcodesize - Maximum `.rxtext` size. (Default: 4096) + /maxdatasize: - Maximum `.rxdata` size. (Default: 4096) + /maxcodesize: - Maximum `.rxtext` size. (Default: 4096) /disabledep - Disables DEP. /disableaslr - Disables ASLR. /forceguardcf - Force processing for GuardCF protected executable. /noentrypoint - No entry point. + /hookexports - Hook exported functions in `.rxhooks` section. + /hooksize: - Hook size for one function. (Default: 16) + /hookalign: - Hook alignment size. (Default: 4) /input: - Input PE executable. /payload: - Input binary (.bin) or assembly file (.asm). (Default: null) /savepayload - Save payload to binary file.