Skip to content

Releases: tijme/dittobytes

Release 1.0.10

05 Aug 19:22
9b1a5d0
Compare
Choose a tag to compare

New feature(s):

  • Extra options for StackMovImm substitutions.

Improvement(s):

  • The build environment now works on ARM64 as well.
  • Extended feature tests with switch case, string & loop usage.
  • Error handling in pre-shipped example codes.
  • Improved README instructions before publication.

Fixed bug(s):

  • Failed API call test in GitHub actions.
  • Invalid copy commands in Dockerfile.

Release 1.0.9

16 Jul 20:27
4c6a9d8
Compare
Choose a tag to compare

New feature(s):

  • Modify mov [reg+offset], imm immediate values (metamorphication).

Release 1.0.8

15 Jul 17:20
0e57e1b
Compare
Choose a tag to compare

New feature(s):

  • Example code to pop calc.exe on Windows ARM64.
  • Feature test to call Windows API functions on ARM64.

Release 1.0.7

15 Jul 12:05
7f0e790
Compare
Choose a tag to compare

New feature(s):

  • Support for generating executable files.
  • Feature tests to prevent forensic traces in binaries.

Improvement(s):

  • Pre-shipped loaders now verify the input file type.
  • Pre-shipped loaders are now built within the GitHub workflow.

Fixed bug(s):

  • Invalid build folder for loaders.

Release 1.0.6

12 Jul 17:04
ec8de18
Compare
Choose a tag to compare

New feature(s):

  • Code examples in ./code/examples directory.
  • Support for C++ source code files.
  • Support for Beacon Object Files (BOFs).

Improvement(s):

  • Moved directories irrelevant to users to the ./ditto directory.
  • Improved makefile target naming conventions.

Release 1.0.5

01 Jun 17:03
32d0ca6
Compare
Choose a tag to compare

New feature(s):

  • Randomized function frame (prologue/epilogue) insertion.
  • Multiple options for AMD64 & ARM64 mov [reg], imm substitution.

Improvement(s):

  • Shorter inline storage of strings for AMD64.
  • Metamorphication examples in README.

Bug fixe(s):

  • Random seed could be identical throughout different shellcode compiles.

Release 1.0.4

30 May 20:08
07ca6be
Compare
Choose a tag to compare

New feature(s):

  • Option to enable/disable specific intermediate function pass modules.
  • Option to build and test a specific feature test for a specific metamorphication.

Improvement(s):

  • Decreased the amount of mov statements when inlining strings.

Release 1.0.3

29 May 09:59
476078b
Compare
Choose a tag to compare

Improvement(s):

  • Increased clarity in metamorphications documentation.
  • Better naming conventions for metamorphication modules.

Bug fixe(s):

  • Incorrect usage of MM_TEST variables.

Release 1.0.2

28 May 16:46
Compare
Choose a tag to compare

New feature(s):

  • Added random substitution for nullifying a register.

Improvement(s):

  • Option to build & run specific feature test for specific os/arch.
  • Separated machine function transpiler into two steps (before & after register allocation).
  • Added an option to always perform transpilations (instead of randomly) for feature testing.

Release 1.0.1

23 May 16:34
Compare
Choose a tag to compare

New feature(s):

  • Multiple argument support for @verify decoration in feature tests.
  • Windows specific feature test with Windows API calls.

Improvement(s):

  • Run feature tests that do not require execution on all operating systems.
  • Run ARM64 feature tests on AMD64 using Qemu on Linux.
  • Various parts of documentation clarified.

Bug fixe(s):

  • Expand memset calls to prevent unexpected and unresolved OS API calls.