mirror of
https://github.com/nixpal/shellsilo
synced 2026-06-06 16:24:28 +00:00
Tarek Ahmed
51 lines
1.3 KiB
C
51 lines
1.3 KiB
C
#include <Windows.h>
|
|
#include <iostream>
|
|
|
|
// Define necessary structures and types
|
|
|
|
typedef struct _UNICODE_STRING {
|
|
USHORT Length;
|
|
USHORT MaximumLength;
|
|
PWSTR Buffer;
|
|
} UNICODE_STRING, *PUNICODE_STRING;
|
|
|
|
typedef struct _OBJECT_ATTRIBUTES {
|
|
ULONG Length;
|
|
HANDLE RootDirectory;
|
|
PUNICODE_STRING ObjectName;
|
|
ULONG Attributes;
|
|
PVOID SecurityDescriptor;
|
|
PVOID SecurityQualityOfService;
|
|
} OBJECT_ATTRIBUTES, *POBJECT_ATTRIBUTES;
|
|
|
|
|
|
typedef struct _CLIENT_ID {
|
|
HANDLE UniqueProcess;
|
|
HANDLE UniqueThread;
|
|
} CLIENT_ID, *PCLIENT_ID;
|
|
|
|
|
|
|
|
<MAIN>
|
|
{
|
|
|
|
DWORD targetProcessId = 5244;
|
|
|
|
CLIENT_ID clientId = NULL;
|
|
|
|
OBJECT_ATTRIBUTES ObjectAttributes = { 0 };
|
|
clientId.UniqueThread = NULL;
|
|
ObjectAttributes.Length = sizeof(OBJECT_ATTRIBUTES);
|
|
clientId.UniqueProcess = targetProcessId;
|
|
HANDLE hProcess = NULL;
|
|
NtOpenProcess(&hProcess, PROCESS_ALL_ACCESS, &ObjectAttributes, &clientId);
|
|
PVOID remoteBuffer = NULL;
|
|
SIZE_T bufferSize = 4096;
|
|
ObjectAttributes.Length = sizeof(OBJECT_ATTRIBUTES)
|
|
PVOID mystr = "Hello, World!";
|
|
ULONG numOfBytesWritten = 0;
|
|
|
|
NtAllocateVirtualMemory(hProcess, &remoteBuffer, 0, &bufferSize, MEM_COMMIT | MEM_RESERVE, PAGE_READWRITE);
|
|
NtWriteVirtualMemory(hProcess, remoteBuffer, mystr, 13, &numOfBytesWritten);
|
|
}
|