admin/r3xmax-PhantomCtx
1
0
Fork 0
mirror of https://github.com/r3xmax/PhantomCtx synced 2026-06-17 15:03:19 +00:00
Code Issues Packages Projects Releases Wiki Activity

Update README.md

Browse Source
This commit is contained in:
Constantino Raul Soltan
2026-06-17 12:56:27 +02:00
committed by GitHub
parent 9b61194728
commit 449f5fceb0
1 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
README.md
+4 -4
View File
@@ -647,13 +647,13 @@ In this case, the payload DLL executes `calc.exe`. No alerts were generated.
This tool was developed for **personal educational purposes** and is intended exclusively
for security professionals and red team operators working in **authorized environments**.
The use of PhantomCtx against systems without explicit permission is **illegal** and
strictly prohibited. The author takes no responsibility for any misuse or damage caused
by this tool.
# References
- [Activation Context Hijack by Kurosh Dabbagh - Navaja Conference](https://www.youtube.com/watch?v=qu4fXWKjabY)
- [Activation Context Hijack ‘Eclipse’ Loader](https://github.com/Kudaes/Eclipse)
- [NtDoc](https://ntdoc.m417z.com/)
- [ReactOS Source Code](https://github.com/reactos/reactos)
- [Windows Internals Book](https://learn.microsoft.com/en-us/sysinternals/resources/windows-internals)
The use of PhantomCtx against systems without explicit permission is **illegal** and
strictly prohibited. The author takes no responsibility for any misuse or damage caused
by this tool.