From f9d70eb5550d1e1d2b10ad86ef2e422f49d6126e Mon Sep 17 00:00:00 2001 From: _xeroxz Date: Mon, 8 Mar 2021 06:16:45 +0000 Subject: [PATCH] Update README.md --- README.md | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/README.md b/README.md index 4ab0a36..8e4d250 100644 --- a/README.md +++ b/README.md @@ -1,3 +1,6 @@ -# Theodosius +# Theodosius - Jit linker, driver mapper, and obfuscator -Jit linker, driver mapper, and obfuscator \ No newline at end of file +Theodosius (Theo for short) is a jit linker created entirely for obfuscation and mutation of both code, and code flow. The project is extremely modular in design and supports +both kernel and usermode projects. Since Theo inherits HMDM (highly modular driver mapper), any vulnerable driver that exposes arbitrary MSR writes, or physical memory read/write can be used with this framework. This is possible since HMDM inherits VDM (vulnerable driver manipulation), and MSREXEC (elevation of arbitrary MSR writes to kernel execution). + +Since Theo is a jit linker, unexported symbols from PE files can be jit linked. Resolving such symbols is open ended and allows the user of this framework to handle how they want to resolve symbols. More on this later (check out example projects). \ No newline at end of file