DLL native mode about inceptor HOT 3 OPEN

Hi @0xElessar, thanks for the continous testing, it is very precious.

So, let's come to your points one by one:

• Oflline signing: Should be fixed in dev branch
• x86 Exports: You should define an export file .def if you want to prevent names from being mangled by the linker.
• --clone standard behaviour is to copy everything from a binary. If you want just the metadata like "company, copyright, etc" there is no support for that, but there will be in the near future, so stay tuned.
• XOR not working, what do you mean with that exactly?

from inceptor.

My pleasure, @klezVirus.

I will try to define .def file then. I remember having problems with it in the past. But i will try again.

Do you have any suggestion how to use --clone function effectively? In my testing, my payloads were overwritten by this function.

When I use an encoder with the DLL, there is no error message during DLL generation, but the payload seems to be damaged. Even a simple payload with a message box does not work after using an encoder. Without an encoder, the payload is executed successfully.

from inceptor.

Hi, I tried your tool using a .def file created with

dumpbin /exports file.dll /out:file.def

I provided the file.def as --exports parameter but I get the following error when executed:

Traceback (most recent call last):
  File "inceptor.py", line 268, in <module>
    generator = NativeArtifactGenerator(binary_abs_path,
  File "C:\Users\Username\Documents\Tools\inceptor\inceptor\generators\NativeArtifactGenerator.py", line 147, in __init__
    self.dll_compiler_args["/DEF"] = f'"{os.path.abspath(self.exports)}"'
TypeError: 'NoneType' object does not support item assignment

How can I set custom exports?

from inceptor.