Shooker
Tool for C-code injections in already compiled bins.
Usage
Write hook config as described in the instruction.
shooker --xml config.xml target_dir/ output_dir/
Install
pip install shooker
Please read about common errors
Tests
Follow the instruction to check the functionality
git clone https://github.com/ReKreker/shooker
cd shooker/tests
cmake -S. -Bbuild
pushd build
make
make test
popd
To improve
- Add ability to inject to .exe/.dll
- Try to avoid sub-instruction patching mechanism in the hook(s)
- Add support of arm architecture
- Add support hooking raw binaries
- Develop true hook(not replace)
- Plug in IDA/Ghidra
1 maintainer
Metadata
1 maintainer
Release files for shooker 1.2.3
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | |
|---|---|---|---|
| shooker-1.2.3.tar.gz | 10.9 kB | Details |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| shooker-1.2.3-py3-none-any.whl | Python 3 | none | any | Details |
Total release size: 21.0 kB
Release files / shooker-1.2.3.tar.gz
| Download URL | shooker-1.2.3.tar.gz |
|---|---|
| Size | 10.9 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
a64a55d7907bc14eb130277184fe58f75c4d422acee7aafbf015e0abbebe1d63
|
|
BLAKE2b-256 checksum How to use checksums |
0c8fd98cadb9e40f0cad56c87c0349b961cea13bacb750b23f1e3fef68b99d1e
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/4.0.2 CPython/3.11.0
|
Release files / shooker-1.2.3-py3-none-any.whl
| Download URL | shooker-1.2.3-py3-none-any.whl |
|---|---|
| Size | 10.1 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
b14c78c382828441c0ffba71e35b6f5f918db5f9ea6104a738e8f10dfa2dd24a
|
|
BLAKE2b-256 checksum How to use checksums |
38cddadf3038656a6daf151ff3636a4eb995041013aff7462ec3e2acde57baaf
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/4.0.2 CPython/3.11.0
|
