CLI extension to IAT_Patcher by Hashier Zade
IAT_Patcher: http://hasherezade.github.io/IAT_patcher/
Requires:
- bearparser: https://github.com/hasherezade/bearparser
- Qt5 SDK
- Qt5 Core
- Qt5 GUI
- cmake http://www.cmake.org/
Make sure that Qt and cmake requirement are satisfied
Clone the repository
To build it on Linux or MacOS you can use the given script - autobuild.sh.
git clone repo cd auto_IAT_patcher bash autobuild.sh
Put all your executables in build/patcher/malware_src
run build/patcher/hook_em.sh:
cd build/patcher bash hook_em.sh
Find hooked executables in build/patcher/malware_dst
1. Hook replacement declarations:b>
build/patcher/rep_list defines hook replacements
- First line a number n, e.g. total number of hook declarations
- n lines follows, each line is 4 tuple: original API, original dll, hooked API, hooked dll