Skip to content

Tags: 8damon/ActiveBreach-Engine

Tags

v1.5

Toggle v1.5's commit message
rust: harden syscall dispatcher + stealthify Win32 deps

- Randomize stub pool size (24-38) and improve stack spoofing (ensure ntdll.dll return on top)
- Make syscall table + stub lookup use opaque handles instead of exposing raw ptrs
- Replaced GetCurrentProcess/GetCurrentThreadId/GetModuleHandle*/IsDebuggerPresent/CloseHandle/ExitProcess with PEB/TEB + ntdll/Nt* + asm
- Cleanup rustdoc/docs.rs warnings & normalize docs

v1.2

Toggle v1.2's commit message
C++ Overhaul

- Added ab_call_fn function on top of existing macro for more flexibility
- Disabled stack frame generation for specific functionsto prevent stack dumps
- Added hash-based lookup instead of plaintext syscall names to prevent simple YARA mem lookups for strings
- Full support for C++14 & C++20 introduced with heavy optimizations for C++ 20
- Switched to 16 arguments for C++ version (previously 8, was already 16 on both C & Rust)
- Added SIMD & AVX support on hashing
- Added C test alongside additional tests
- Confirmed extended argument syscall support now works with up to 16 arguments

v1.1

Toggle v1.1's commit message
Fix: C++17 compatibility in _BuildStubs()

v1.0

Toggle v1.0's commit message
Version 1.0 Release