Commit Graph

12 Commits

Author SHA1 Message Date
naksyn c676f20717 Update README.md 2023-07-27 16:04:11 +02:00
naksyn 463c9a31de Update README.md 2023-07-27 16:03:10 +02:00
naksyn db1893910c command line support (partial) via PEB stomping
This update include support to passing command line parameters to unmanaged exe via PEB stomping.
This technique is not working with every executable since it depends on which functions are used to pass arguments.
Generally, to get a universally working technique would be required to hook GetCommandlineA GetCommandlineW __getmainargs and __wgetmainargs since PEB stomping won't cover all cases, more details here:
https://blog-30cm-tw.translate.goog/2020/08/windows-c-mainargc-argv.html?_x_tr_sl=auto&_x_tr_tl=en&_x_tr_hl=it&_x_tr_pto=wapp

However, during my testing I found that mimikatz and several go binaries are working just by doing PEB stomping.
On the other hand, cmdline passing via PEB stomping alone to mingw and VS compiled binaries won't likely work.
2023-07-27 06:44:29 -07:00
naksyn 63ebe1c4ba Update README.md 2023-04-12 09:52:53 +02:00
naksyn 23f756e000 Update README.md 2023-02-19 12:16:46 +01:00
naksyn 7b5313a4b9 Update README.md 2023-01-27 11:16:29 +01:00
naksyn 8bad713e08 added execution of unmanaged EXEs
Simply calling the .exe entrypoint can achieve execution using MemoryModule technique, .NET assemblies are not yet supported.
2023-01-27 11:12:45 +01:00
naksyn a0f057e080 Fixes unreferenced variable error 2023-01-21 17:36:01 +01:00
naksyn ec4c50ac43 Merge pull request #2 from rkbennett/main
fixes issues for import ordinal entries
2023-01-08 10:48:02 +01:00
rkbennett a43f405445 fixes invalid ordlookup function reference, adds compatibility for py veunicode strings and nd LPCSTR ord cast 2023-01-07 11:14:05 -06:00
naksyn fc3dbea6c0 Initial commit
Initial commit
2023-01-05 11:37:09 +01:00
naksyn 2243248081 Initial commit 2023-01-05 11:33:48 +01:00