From 99b1657c41dccc889996158e4aacff0ec51533cf Mon Sep 17 00:00:00 2001 From: Alex Davies Date: Sun, 5 Nov 2017 09:49:07 +0000 Subject: [PATCH] Update iat-injection.cs --- iat-injection.cs | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/iat-injection.cs b/iat-injection.cs index 47aeaaf..7e559be 100644 --- a/iat-injection.cs +++ b/iat-injection.cs @@ -7,9 +7,13 @@ To build and run: C:\Windows\Microsoft.NET\Framework\v4.0.30319\csc.exe iat-inject.cs && iat-inject.exe +Note: By default this module is configured to target the CreateFileW import of notepad.exe. Notepad will need to be running before you execute this code! + Note: During test it was found that shellcode execution would modify the stack and break subsequent functions. Afaik the solution is to use shellcode that cleans up after itself. +Note: This code only supports x64 at the momemt, some further tweaks may be needed for x86. + */ using System;