6 Commits

Author SHA1 Message Date
naksyn 9bb2f6761d Added control and moved folder
Added control for empty passed argument and moved windows folder out for easier importing.
2023-12-16 13:03:40 +01:00
naksyn db1893910c command line support (partial) via PEB stomping
This update include support to passing command line parameters to unmanaged exe via PEB stomping.
This technique is not working with every executable since it depends on which functions are used to pass arguments.
Generally, to get a universally working technique would be required to hook GetCommandlineA GetCommandlineW __getmainargs and __wgetmainargs since PEB stomping won't cover all cases, more details here:
https://blog-30cm-tw.translate.goog/2020/08/windows-c-mainargc-argv.html?_x_tr_sl=auto&_x_tr_tl=en&_x_tr_hl=it&_x_tr_pto=wapp

However, during my testing I found that mimikatz and several go binaries are working just by doing PEB stomping.
On the other hand, cmdline passing via PEB stomping alone to mingw and VS compiled binaries won't likely work.
2023-07-27 06:44:29 -07:00
naksyn 8bad713e08 added execution of unmanaged EXEs
Simply calling the .exe entrypoint can achieve execution using MemoryModule technique, .NET assemblies are not yet supported.
2023-01-27 11:12:45 +01:00
naksyn a0f057e080 Fixes unreferenced variable error 2023-01-21 17:36:01 +01:00
rkbennett a43f405445 fixes invalid ordlookup function reference, adds compatibility for py veunicode strings and nd LPCSTR ord cast 2023-01-07 11:14:05 -06:00
naksyn fc3dbea6c0 Initial commit
Initial commit
2023-01-05 11:37:09 +01:00