Shaurma

Lower down the number of disk operations

4

Have a nice day! I find out that during process scanning "pe-sieve" as well as "mal_unpack" does a huge amount of disk operations. This is fine when you are inside...

A little improvements (DCP)

8

Thanks for your amazing repo. I'm not an expert, but probably may suggest a little improvements. 1. You have a call to VirtualAlloc in your shellcode. Since some windows processes...

std::wstring as argument type doesn't work

3

I use this code: `("r, prefix", "Output file prefix", cxxopts::value(prefix))` It generates error: `C2679 binary '>>': no operator found which takes a right-hand operand of type 'T' (or there is...

Since you align up the virtual and raw size, you might need to change SizeOfHeaders too. It should be 0x1000 (the raw offset of the first section) for the example....

Fail to log into driver

2

Spdlog failed to write logs to the driver object like this: ``` \\\\.\\Driver ``` This happens on Windows because it uses the following function to open a file: ``` *fp...

This code crash compiler: ``` enum VMCS_FIELD_ENCODING : decltype(VMCS_COMPONENT_ENCODING::Value) { ``` with error: ``` 3>C:\Sources\Kernel-Bridge\CommonTypes\VMX.h(266,6): fatal error C1001: Internal compiler error. 3>(compiler file 'msc1.cpp', line 1576) 3> To work around...

Terminate tshark instead of killing

1

I have a simple code running in separate thread (Linux) to sniff packets: ``` def run(self): self.capture = pyshark.LiveCapture( interface=self.interface, bpf_filter=self.bpf_filter, debug=True) for packet in self.capture.sniff_continuously(): if self._stop_event.is_set(): self.capture.close() break...