mirror of
https://github.com/PowerShellMafia/PowerSploit
synced 2026-06-08 12:13:33 +00:00
Matt Graeber
dfec277813
Another awesome addition from Joe Bialek. Invoke-ReflectivePEInjection is a vast improvement over Invoke-ReflectiveDllInjection. It adds the following features: * Now supports loading exe files in memory * Supports reflective dll injection into a remote process * Additional sample Visual Studio solutions
14 lines
272 B
NASM
14 lines
272 B
NASM
[SECTION .text]
|
|
global _start
|
|
|
|
_start:
|
|
; Set a var to 1, let PS know the EXE is exiting
|
|
mov ebx, 0x41414141
|
|
mov [ebx], byte 0x01
|
|
|
|
; Call exitthread instead of exit process
|
|
sub esp, 0x20
|
|
and esp, 0xFFFFFFc0 ; Needed for stack alignment
|
|
mov ebx, 0x41414141
|
|
call ebx
|