Tags: 8damon/ActiveBreach-Engine
Tags
rust: harden syscall dispatcher + stealthify Win32 deps - Randomize stub pool size (24-38) and improve stack spoofing (ensure ntdll.dll return on top) - Make syscall table + stub lookup use opaque handles instead of exposing raw ptrs - Replaced GetCurrentProcess/GetCurrentThreadId/GetModuleHandle*/IsDebuggerPresent/CloseHandle/ExitProcess with PEB/TEB + ntdll/Nt* + asm - Cleanup rustdoc/docs.rs warnings & normalize docs
C++ Overhaul - Added ab_call_fn function on top of existing macro for more flexibility - Disabled stack frame generation for specific functionsto prevent stack dumps - Added hash-based lookup instead of plaintext syscall names to prevent simple YARA mem lookups for strings - Full support for C++14 & C++20 introduced with heavy optimizations for C++ 20 - Switched to 16 arguments for C++ version (previously 8, was already 16 on both C & Rust) - Added SIMD & AVX support on hashing - Added C test alongside additional tests - Confirmed extended argument syscall support now works with up to 16 arguments