10000 Allow sandcat DLL to execute on DLL load instead of just through exported func, also add deployment options by uruwhy · Pull Request #445 · mitre/sandcat · GitHub
[go: up one dir, main page]
More Web Proxy on the site http://driver.im/
Skip to content

Allow sandcat DLL to execute on DLL load instead of just through exported func, also add deployment options #445

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
wants to merge 5 commits into
base: master
Choose a base branch
from
Open

Allow sandcat DLL to execute on DLL load instead of just through exported func, also add deployment options #445

wants to merge 5 commits into from

Conversation

uruwhy
Copy link
Contributor
@uruwhy uruwhy commented Jun 26, 2025

Description

  • Add DLL deployment options for sandcat agent via GUI
  • Add option to have sandcat agent run on DLL load, not just via exported func
  • add guard to avoid executing agent twice when calling exported func

Type of change

  • New feature (non-breaking change which adds functionality)
  • This change requires a documentation update

How Has This Been Tested?

  • Compiled DLL and executed via rundll32.exe sandcat.dll,VoidFunc and also via powershell P/Invoke to load via LoadLibrary API call

Checklist:

  • My code follows the style guidelines of this project
  • I have performed a self-review of my own code
  • I have made corresponding changes to the documentation
  • I have added tests that prove my fix is effective or that my feature works

@sonarqubecloud SonarQubeCloud
Copy link

Quality Gate Passed Quality Gate passed

Issues
7 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
1 participant
@uruwhy
0