Friday, August 7, 2009

Parsed metasploit windows syscall table

Someone on game-deception is working on something based on this, so I shared what I did a while ago, but also posting it here for anyone interested.

I am of course talking about the following website:
http://www.metasploit.com/users/opcode/syscalls.html

... this file is basically a C (and C++) header based on information on that webpage. It does not include all syscalls, only those that are available on all listed versions of windows. Windows 7 is not included. It contains a table of syscall numbers sorted per windows version and also function prototypes.

Download: Parsed_Syscalls.h

MassImport - Import tons of WINAPIs to create confusion

Just a small code snippet that will reference (import) many WINAPIs at compile time.

This is pretty lame, but I often don't want people to know exactly which WINAPIs I use and feel lazy for importing them manually, so I made something that will import many APIs and it won't be obvious which ones exactly I use. :P

Download: MassImport.rar