mirror of
https://github.com/violet-devsec/win-shellcode-dev
synced 2026-06-06 16:54:33 +00:00
violet-devsec
37 lines
1.1 KiB
Markdown
37 lines
1.1 KiB
Markdown
# Windows x64 shellcode to load DLL from memory
|
|
|
|
A reflective DLL injector written in x64 ASM language. This does the minimum required operations to load a DLL which is loaded in memory(no need to be on disk).
|
|
|
|
This is done step by step as,\
|
|
1. Calculate the DLL's current base address\
|
|
2. Process the kernels exports for the functions our loader needs\
|
|
3. Load our image into a new permanent location in memory\
|
|
4. Load in all of our sections\
|
|
5. Process DLL image's import table\
|
|
6. Process all of DLL image's relocations\
|
|
7. Call the DLL entry point
|
|
|
|
### Steps to try:
|
|
- [Compiling target.dll](#CompilingDll)
|
|
> g++ -shared -o target.dll target.cpp -Wl,--out-implib,libtdll.a
|
|
- [Create shellcode](#usage)
|
|
> python shellcode.py
|
|
- [Compiling loader.exe](#CompilingExe)
|
|
> g++ loader.c -o loader.exe
|
|
- [Running loader.exe](#CRunningExe)
|
|
> loader.exe
|
|
|
|
|
|
## Usage
|
|
|
|
Examples and instructions for using the project.
|
|
|
|
## Contributing
|
|
|
|
Guidelines for contributing to the project.
|
|
- [Contributing](#contributing)
|
|
|
|
## License
|
|
|
|
Information about the project's license.
|
|
- [License](#license) |