From ddb76ef692bee43bda912c2a5268b92627a7e287 Mon Sep 17 00:00:00 2001 From: Winslow <33692631+senzee1984@users.noreply.github.com> Date: Thu, 11 Apr 2024 14:36:22 -0400 Subject: [PATCH] Update README.md --- README.md | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/README.md b/README.md index 926074f..9a169f9 100644 --- a/README.md +++ b/README.md @@ -63,6 +63,8 @@ In this way, rather than manually map a file, we only need to patch specific dat The dumped main module will be saved as a binary file to append to the shellcode stub. For instance, DumpPEFromMemory executes a classic tool mimikatz, and dumps its main module into a binary file. + +![image](/screenshot/dumper-dll.jpg) ```shell PS C:\dev\inflativeloading> .\DumpPEFromMemory.exe C:\beacontest.dll beacontest.bin [+] The file is a DLL file @@ -88,7 +90,7 @@ VirtualAlloc(buffer + 0x2000 + 0x1000, 0x5000, 0x3000, 0x20); [+] Data successfully written to beacontest.bin ``` - +![image](/screenshot/dumper-exe.jpg) ```shell PS C:\dev\inflativeloading> .\DumpPEFromMemory.exe .\mimikatz.exe mimikatz.bin [+] The file is an EXE file