mirror of
https://github.com/PowerShellMafia/PowerSploit
synced 2026-06-08 12:13:33 +00:00
Matt Graeber
dfec277813
Another awesome addition from Joe Bialek. Invoke-ReflectivePEInjection is a vast improvement over Invoke-ReflectiveDllInjection. It adds the following features: * Now supports loading exe files in memory * Supports reflective dll injection into a remote process * Additional sample Visual Studio solutions
12 lines
416 B
Plaintext
12 lines
416 B
Plaintext
This contains the assembly code I used to build the shellcode the PowerShell script uses. Some of the assembly isn't included beause I didn't save it, this should just be for the SUPER easy stuff like moving an address to EAX and returning.
|
|
|
|
Compile:
|
|
x64:
|
|
nasm -f elf64 FileName.asm
|
|
ld -o FileName FileName.o
|
|
objdump -M intel -d FileName
|
|
|
|
x86:
|
|
nasm FileName.asm
|
|
ld -o FileName FileName.o
|
|
objdump -M intel -d FileName |