Skip to content

A exe loader that can load NScript evaluation engine of Windows Defender/Microsft Security Essential. You can fuzz NScript by using this. Project was based on Tavis Ormandy(taviso)'s "Porting Windows Dynamic Link Libraries to Linux" (https://github.com/taviso/loadlibrary)

Notifications You must be signed in to change notification settings

leonwxqian/windows-defender-nscript-loader

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

6 Commits
 
 
 
 
 
 

Repository files navigation

windows-defender-nscript-loader

Intro A exe loader that can load NScript evaluation engine of Windows Defender/Microsft Security Essential.

You can send your javascript like script to this engine and fuzz NScript by yourself.

Project was (mostly) based on Tavis Ormandy(taviso)'s "Porting Windows Dynamic Link Libraries to Linux" (https://github.com/taviso/loadlibrary)

  绝大多数代码都是基于Tavis大神的Linux下加载MSE DLL的工程,对日志记录等做了修改以让工程可以顺利地在Windows系统上跑起来。采用和该工程同样的协议GPLv2。  

Usage

a) You MUST have a mpengine.dll from Windows Defender / MSE and put it under engine/mpengine.dll. Tested version is: 1.1.13804.0. (No download is proved here, you need to find this file by yourself.)

a)你必须先找到一个WD、MSE中所包含的mpengeine.dll文件并把它放到engine/mpengine.dll下。因为这个文件是微软的商业文件,这里不能提供下载,请自行查找,微软的网站上应该是能找的。  

b) Compile the project with Visual Studio 2013.  

b)使用VS2013 Update 4编译该工程。  

c) Run the program.

c) 执行编译后的程序即可。  

License

GPLv2

About

A exe loader that can load NScript evaluation engine of Windows Defender/Microsft Security Essential. You can fuzz NScript by using this. Project was based on Tavis Ormandy(taviso)'s "Porting Windows Dynamic Link Libraries to Linux" (https://github.com/taviso/loadlibrary)

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published