From 0b41b845e2970c2d41c5f98491fd4c0152fd04e7 Mon Sep 17 00:00:00 2001 From: TimWhite <36320909+timwhitez@users.noreply.github.com> Date: Fri, 11 Mar 2022 14:35:23 +0800 Subject: [PATCH] Update README.md --- README.md | 9 +++++++-- 1 file changed, 7 insertions(+), 2 deletions(-) diff --git a/README.md b/README.md index 2d4c7c4..8e18b98 100644 --- a/README.md +++ b/README.md @@ -5,7 +5,7 @@ - 🐶Doge For Defense Evasion & Offensive Security # Doge-Gabh -GetProcAddressByHash/remap/full dll unhooking/Tartaru's Gate/Spoofing Gate/universal/Perun's Fart/Spoofing-Gate/EGG golang implementation +GetProcAddressByHash/remap/full dll unhooking/Tartaru's Gate/Spoofing Gate/universal/Perun's Fart/Spoofing-Gate/EGG/RecycledGate golang implementation Doge-Gabh为集成 Windows ntdll动态调用,直接系统调用,api hash调用,dll脱钩的Golang组件包。 @@ -14,7 +14,7 @@ Doge-Gabh为集成 Windows ntdll动态调用,直接系统调用,api hash调用,d 这可以用于许多目的,例如 PE 解析、动态 API 调用、shellcode loader、进程注入和绕过API挂钩等。 -集成多种地狱之门以及地狱之门衍生项目的golang实现:Hells Gate/HalosGate/Tartaru's Gate/Spoofing Gate/Doge-EGGCall/[Recycled Gate(开发中)] +集成多种地狱之门以及地狱之门衍生项目的golang实现:Hells Gate/HalosGate/Tartaru's Gate/Spoofing Gate/Doge-EGGCall/RecycledGate 项目名称Gabh原意仅为GetAddressByHash, 后延申为类似DInvoke的动态调用工具包。 @@ -71,6 +71,11 @@ gabh.PerunsFart() //full dll unhooking use cmd.exe type gabh.CMDUnhook() +//get syscall;ret +gabh.GetRecyCall() + +//recycled gate call +gabh.ReCycall() ```