diff --git a/DetectProcessorMode/README.md b/DetectProcessorMode/README.md index 213d538..932f069 100644 --- a/DetectProcessorMode/README.md +++ b/DetectProcessorMode/README.md @@ -45,4 +45,5 @@ msfvenom -a x64 --platform Windows --payload windows/x64/messagebox -f raw -o sh 1. [Architecture Detection (x86 or x64) Assembly Stub](https://zerosum0x0.blogspot.com/2014/12/detect-x86-or-x64-assembly-stub.html) 2. [DoublePulsar Initial SMB Backdoor Ring 0 Shellcode Analysis](https://zerosum0x0.blogspot.com/2017/04/doublepulsar-initial-smb-backdoor-ring.html) 3. [eternalblue_sc_merge.py](https://github.com/worawit/MS17-010/blob/master/shellcode/eternalblue_sc_merge.py) -4. [Multi-bitness x86 code](https://pagedout.institute/download/PagedOut_001_beta1.pdf) \ No newline at end of file +4. [Multi-bitness x86 code](https://pagedout.institute/download/PagedOut_001_beta1.pdf) +5. [Full Fat Shellcode](https://winternl.com/full-fat-shellcode/) \ No newline at end of file