admin/sliverarmory-injectEtwBypass
1
0
Fork 0
mirror of https://github.com/sliverarmory/injectEtwBypass synced 2026-06-08 17:30:57 +00:00
Code Issues Packages Projects Releases Wiki Activity

Update README.md

Browse Source
This commit is contained in:
Bobby Cooke
2021-09-21 17:21:37 -07:00
committed by GitHub
parent 99b41cf33e
commit 59eee1d762
1 changed files with 3 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
README.md
+3 -2
View File
@@ -7,7 +7,8 @@ Inject ETW Bypass into Remote Process via Syscalls (HellsGate|HalosGate)
### Compile with x64 MinGW:
```bash
cat compile.sh
x86_64-w64-mingw32-gcc -m64 -mwindows -c injectEtwBypass.c -o injectEtwBypass.o -masm=intel -Wall -fno-asynchronous-unwind-tables -nostdlib -fno-ident -Wl,-Tlinker.ld,--no-seh
x86_64-w64-mingw32-gcc -m64 -mwindows -c injectEtwBypass.c -o injectEtwBypass.o \
-masm=intel -Wall -fno-asynchronous-unwind-tables -nostdlib -fno-ident -Wl,-Tlinker.ld,--no-seh
bash compile.sh
```
@@ -16,7 +17,7 @@ bash compile.sh
+ Once loaded into Cobalt Strike, you can use the command from the interactive beacon console:
```bash
beacon> help
injectEtwBypass Inject ETW Bypass into Remote Process via Syscalls (HellsGate|HalosGate)
injectEtwBypass - Inject ETW Bypass into Remote Process via Syscalls (HellsGate|HalosGate)
beacon> help injectEtwBypass
Synopsis: injectEtwBypass PID
beacon> injectEtwBypass 8968