{"id":27968537,"url":"https://github.com/redsiege/digdug","last_synced_at":"2025-06-14T02:04:57.156Z","repository":{"id":219221120,"uuid":"602263327","full_name":"RedSiege/DigDug","owner":"RedSiege","description":null,"archived":false,"fork":false,"pushed_at":"2024-08-08T01:48:49.000Z","size":3678,"stargazers_count":81,"open_issues_count":1,"forks_count":10,"subscribers_count":2,"default_branch":"main","last_synced_at":"2025-06-13T14:18:29.185Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/RedSiege.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2023-02-15T20:54:56.000Z","updated_at":"2025-05-25T09:58:34.000Z","dependencies_parsed_at":"2025-05-07T21:04:16.620Z","dependency_job_id":"f4d48dc3-b728-4d8e-b284-88c777de2f56","html_url":"https://github.com/RedSiege/DigDug","commit_stats":null,"previous_names":["redsiege/digdug"],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/RedSiege/DigDug","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RedSiege%2FDigDug","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RedSiege%2FDigDug/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RedSiege%2FDigDug/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RedSiege%2FDigDug/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/RedSiege","download_url":"https://codeload.github.com/RedSiege/DigDug/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RedSiege%2FDigDug/sbom","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":259747214,"owners_count":22905310,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2025-05-07T21:04:13.209Z","updated_at":"2025-06-14T02:04:57.126Z","avatar_url":"https://github.com/RedSiege.png","language":"Python","funding_links":[],"categories":[],"sub_categories":[],"readme":"```\n  ██████╗ ██╗ ██████╗     ██████╗ ██╗   ██╗ ██████╗     \n  ██╔══██╗██║██╔════╝     ██╔══██╗██║   ██║██╔════╝     \n  ██║  ██║██║██║  ███╗    ██║  ██║██║   ██║██║  ███╗    \n  ██║  ██║██║██║   ██║    ██║  ██║██║   ██║██║   ██║    \n  ██████╔╝██║╚██████╔╝    ██████╔╝╚██████╔╝╚██████╔╝    \n  ╚═════╝ ╚═╝ ╚═════╝     ╚═════╝  ╚═════╝  ╚═════╝\n ```\nDig Dug helps you evade some AV/EDR detections by increasing a given executable file size. Some engines will not attempt to analyze a file if the file size is greater than some arbitrary threshold. I have not been able to find any definitive information on this threshold for various engines, discussions on offensive security Slacks and Twitter seem to agree that 100-150MB is an average threshold.\n\nDig Dug works by appending words from a dictionary to an executable.  This dictionary is appended repeatedly until the final desired size of the executable is reached. Some AV\u0026EDR engines, such as CrowdStrike Falcon, may measure entropy as a means of determining if an executable is trustworthy for execution. Other vendors inspect executables for signs of null byte padding. Dig Dug may offer an advantage over similar tools designed to inflate file size in that it does not inflate an executable using random data or null bytes. \n\nBy default, Dig Dug uses a modified version of the [google-10000-english](https://github.com/first20hours/google-10000-english) dictionary. I've also supplied a dictionary, exestrings.txt, containing strings extracted from executables in Windows\\System32. You can supply your own text dictionary if you prefer, for example, to have the program padded with words from another language.\n\nDig Dug also incorporates code from [SigThief](https://github.com/secretsquirrel/SigThief/) to copy the digital signature from a source executable to the inflated executable.\n\n## Usage\n\n```\nusage: digdug.py [-h] [-i INPUT] [-m 100] [-d DICTIONARY]\n\nInflate an executable with words.\n\noptions:\n  -h, --help            show this help message and exit\n  -i INPUT, --input INPUT\n                        Input file to increase size.\n  -m 100                Specify the desired size in megabytes to increase by\n  -q, --quiet           Quiet output. Don't print the banner\n  -s SOURCE, --source SOURCE\n                        Source file to copy signature from\n  -d DICTIONARY, --dictionary DICTIONARY\n                        Dictionary to use for padding\n  -r, --random          Use random data for padding instead of dictionary words\n```\n\n### Examples\nInflate a binary by 100 megabytes using a supplied dictionary:  \n`python3 digdug.py -i calc.exe -m 100 -d dictionaries/google-10000-english-usa-gt5.txt`\n\nInflate a binary by 100 megabytes using random data:  \n`python3 digdug.py -i calc.exe -m 100 -r`\n\nInflate a binary by 100 megabytes and steal a signature from consent.exe:  \n`python3 digdug.py -i calc.exe -m 100 -d dictionaries/google-10000-english-usa-gt5.txt -s consent.exe`\n\n## Demo\n\u003cimg src=\"https://github.com/hardwaterhacker/DigDug/blob/main/images/digdug.gif\" width=\"65%\" alt=\"Demonstration of DigDug\"\u003e\n\n## Credits\n- Dig Dug was inspired by [Mangle](https://github.com/optiv/Mangle).  \n- Dig Dug uses portions of [SigThief](https://github.com/secretsquirrel/SigThief/) to copy the digital signature of a file.\n\n## Misc.\nDig Dug takes its name from the [classic arcade game](https://en.wikipedia.org/wiki/Dig_Dug) of the same name in which the protagonist uses an air pump to defeat his enemies by inflating them until they burst.\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fredsiege%2Fdigdug","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fredsiege%2Fdigdug","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fredsiege%2Fdigdug/lists"}