Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bypass custom entry point #37

Closed
Jerem584 opened this issue Nov 18, 2021 · 2 comments
Closed

Bypass custom entry point #37

Jerem584 opened this issue Nov 18, 2021 · 2 comments

Comments

@Jerem584
Copy link
Contributor

Hey,

As you know setting a custom entry point remove the "crtstartup" < at least in usermode

But here's two things that should work:

1- driver export (would work fine)
2- trace crt startup to get the real main and so skip the check and so the bsod

Here's just theory but I would like to know what you guys think,

Ill maybe write a small test to skip crt startup and make a PR once I got it to work

Thanks :)

@TheCruZ
Copy link
Owner

TheCruZ commented Nov 19, 2021

Basically, you want to add a feature to directly reverse real entry point and call it from kdmapper, true?

I'm not sure if people will want this because it will be like having unnecessary bytes at kernel that will never be used since we will not use that startup never

if you give me a proof concept with a small code, I can implement it as param but while that I don't see a real good reason (apart from the people that don't know what means set custom entry point) to add this to the project, if you want to do it, you are always open to do a pull request

@Jerem584
Copy link
Contributor Author

Basically, you want to add a feature to directly reverse real entry point and call it from kdmapper, true?

I'm not sure if people will want this because it will be like having unnecessary bytes at kernel that will never be used since we will not use that startup never

if you give me a proof concept with a small code, I can implement it as param but while that I don't see a real good reason (apart from the people that don't know what means set custom entry point) to add this to the project, if you want to do it, you are always open to do a pull request

well i guess it could be useful somehow to not have any requirement.
guess we can clear thoses useless bytes and the security cookie ofc
Ill write one when i have time of course

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants