Added Invoke-ReflectivePEInjection

Another awesome addition from Joe Bialek. Invoke-ReflectivePEInjection
is a vast improvement over Invoke-ReflectiveDllInjection. It adds the
following features:

* Now supports loading exe files in memory
* Supports reflective dll injection into a remote process
* Additional sample Visual Studio solutions
This commit is contained in:
Matt Graeber
2013-05-31 19:35:26 -04:00
parent 6e5338c8a3
commit dfec277813
56 changed files with 4246 additions and 1551 deletions
@@ -0,0 +1,14 @@
[SECTION .text]
global _start
_start:
; Set a var to 1, let PS known exe is exiting
mov rbx, 0x4141414141414141
mov [rbx], byte 0x01
; Call exitthread instead of exitprocess
sub rsp, 0xc0
and sp, 0xFFf0 ; Needed for stack alignment
mov rbx, 0x4141414141414141
call rbx