KitsuPE

January 31, 2023 ยท View on GitHub

In this repository, you'll find some sort of playground I use for my PE (portable executable) file modification stuff. The code should be compiled using LLVM for Windows because I replace/redefine some intrinsic functions (i.e. memset) for substituting usage of the regular Win32 CRT.

shellcode

The project shellcode contains shellcode which will be compiled into a .exe file. The extract.py script extracts the compiled code from the .exe file into a shellcode.bin file, ready to be loaded as shellcode from a native Win32 application.

shellcode_test implements a default shellcode loader to test this one.

foxywinapi

In these files I added some basic support headers used for Win32 API stuff and as a basic CRT replacement.

foxylib

Contains some helper functions for logging and a debug console (including executable commands). These have no special use yet, but I'm sure I will find a purpose for this.

pe_stub

Stub PE file which will later be used for writing a .exe file packer (this will be the loader).

basic_applications

Contains basic C/C++ applications which I will use to test my PE packer with.