From 93f108b9342e676410dc371272f02740324eb759 Mon Sep 17 00:00:00 2001 From: flux <49762827+0xflux@users.noreply.github.com> Date: Fri, 5 Jul 2024 22:32:41 +0100 Subject: [PATCH] next steps --- shellcode/src/main.rs | 9 +++++++-- 1 file changed, 7 insertions(+), 2 deletions(-) diff --git a/shellcode/src/main.rs b/shellcode/src/main.rs index 371c659..ec53f13 100644 --- a/shellcode/src/main.rs +++ b/shellcode/src/main.rs @@ -104,6 +104,11 @@ pub extern "system" fn main() { return; } - let WinExec: WinExec = unsafe { transmute(win_exec_fn_addr) }; - WinExec("calc.exe\0" as *const _ as *const i8, 1); + // let WinExec: WinExec = unsafe { transmute(win_exec_fn_addr) }; + // WinExec("calc.exe\0" as *const _ as *const i8, 1); + + // TODO - maybe download a bin of other shellcode which does something different + // then inject that into this process?) + // or download a DLL and just use LoadLibraryA on the current process (i.e. no more injection) + // that might be easiest :) } \ No newline at end of file