admin/Kudaes-LOLBITS
1
0
Fork 0
mirror of https://github.com/Kudaes/LOLBITS synced 2026-08-09 12:10:48 +00:00
Code Issues Packages Projects Releases Wiki Activity

Reflective .exe injection added.

Browse Source
This commit is contained in:
Kurosh Dabbagh Escalante
2020-02-08 13:20:56 +01:00
committed by GitHub
parent ca3d69edd4
commit 969b981ca7
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
README.md
+1 -1
View File
@@ -161,7 +161,7 @@ executed using exclusively [Living of The Land Binaries](https://github.com/LOLB
Despite this features could be interesting in some environments (hmm downloading remote files without using Powershell? I like it!) I kept them just to reuse part of the old code for the
C&C console. Below is a list with some features that im sure will be more usefull in a regular situation:
* **inject**: Download from the C&C a shellcode (.bin) or dll (.NET assembly) file and execute it in memory. With this command the payload never touches disk unencrypted, avoiding AV detection. Shellcode injection is only implemented for 64 bits procesess. The shellcode injection can be executed on both own and remote process.
* **inject**: Download from the C&C a shellcode (.bin) or PE (.NET assembly) file and execute it in memory. With this command the payload never touches disk unencrypted, avoiding AV detection. Shellcode injection is only implemented for 64 bits procesess. The shellcode injection can be executed on both own and remote process.
* **psh**: Generate a remote Powershell version 2 shell. This shell has to be handled by additional sofware like netcat (just run nc -lvp <port>).
* **send**: To send a file from your C&C to the compromised host just use this option. The sent file will be store in disk, so be carefull.
* **getsystem**: Attempt to obtain System privileges using named pipes impersonation. High integrity process required.