admin/senzee1984-InflativeLoading
1
0
Fork 0
mirror of https://github.com/senzee1984/InflativeLoading synced 2026-06-06 16:44:31 +00:00
Code Issues Packages Projects Releases Wiki Activity

Update README.md

Browse Source
This commit is contained in:
Winslow
2024-03-08 14:28:52 -05:00
committed by GitHub
parent e306afbbae
commit 83a539ac60
1 changed files with 13 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
README.md
+13 -1
View File
@@ -105,9 +105,21 @@ Because InflativeLoading is in its early stage, not every exe is supported well.
:white_check_mark: Native console program that has an interactive console/shell, like Mimikatz.
## Improvement Over ReflectiveLoader
:heavy_check_mark: No specific export functions are required, making it more friendly towards PE files for which the source code and compilation are not conveniently accessible
:heavy_check_mark: Avoids unintended results due to differences between the PE file on disk and in memory
:heavy_check_mark: Eliminates the need for conversion between the original file offset and RVA
:heavy_check_mark: Avoids additional memory space allocation
:heavy_check_mark: Avoids RWX memory regions.
:heavy_check_mark: Even for RX memory regions, it does not start with the MZ characteristic, increasing the difficulty of investigation.
## Capabilities
:ballot_box_with_check: Support for normal native EXE
:ballot_box_with_check: Support for EXE that has Delayed Import Directory