Crates.io | anonlink |
lib.rs | anonlink |
version | 0.1.4 |
source | src |
created_at | 2022-09-19 15:08:45.895735 |
updated_at | 2024-09-09 09:40:58.524871 |
description | Command line tool to automatically patch link.exe to remove Rich PE Header |
homepage | |
repository | https://github.com/StackOverflowExcept1on/anonlink |
max_upload_size | |
id | 669195 |
size | 26,323 |
Command line tool to automatically patch link.exe to remove Rich PE Header
TL;DR: when you building exe file with MSVC toolchain, Microsoft leaks some info about your development tools, such as version of compiler and number of C/C++ source files
For more advanced users: The Undocumented Microsoft "Rich" Header
cargo install anonlink
cargo build --release
:: run as administrator!
cargo run --release
linker path: C:\Program Files\Microsoft Visual Studio\2022\Enterprise\VC\Tools\MSVC\14.41.34120\bin\Hostx64\x64\link.exe
Found call instruction at address 140051A96
Found add instruction at address 140051AAA
Patching bytes [03, CF] => [90, 90]