Gallopsled / pwntools / 16753693746 / 1

74%

dev: 19%

push

github

Support longer function names in Windows `getexport` shellcode (#2587)

* Support longer function names in Windows getexport shellcode

Previously, an arbitrary name length limit of 8 characters was in place due to the lack of a proper strcmp loop. Implement a cheap strcmp for longer function names.
This trashes a bunch of registers and we might be able to optimize it further to reduce the damage.

Use a unique label too to avoid redefinition when using the shellcraft template twice in the same shellcode. Use the mov shellcraft template for the destination register to avoid an instruction if the result is already in the desired register.

* Update CHANGELOG

3749 of 6308 branches covered (59.43%)

13167 of 17865 relevant lines covered (73.7%)

0.74 hits per line