File tree 1 file changed +20
-0
lines changed
1 file changed +20
-0
lines changed Original file line number Diff line number Diff line change @@ -28,6 +28,22 @@ cpp.LoadWithKernel32();//or cpp.LoadWithNT();
28
28
cpp.Dispose();
29
29
```
30
30
31
+ MapView:
32
+
33
+ ```
34
+ ShellCodeLoader.MapView cpp = new ShellCodeLoader.MapView(PayloadCpp64.rawData);
35
+ cpp.LoadWithNtMapView();
36
+ cpp.Dispose();
37
+ ```
38
+
39
+ MapView with target:
40
+
41
+ ```
42
+ ShellCodeLoader.MapView cpp = new ShellCodeLoader.MapView(Target, PayloadCpp64.rawData);
43
+ cpp.LoadWithNtMapView();
44
+ cpp.Dispose();
45
+ ```
46
+
31
47
Includes :
32
48
33
49
* Asynchronous (a simple Task.Run to not block main thread)
@@ -38,6 +54,8 @@ Includes :
38
54
* NtDll : NtProtectVirtualMemory
39
55
* NtDll : NtFreeVirtualMemory
40
56
* NtDll : NtCreateThreadEx
57
+ * NtDll : NtCreateSection
58
+ * NtDll : NtMapViewOfSection
41
59
* Kernel32 : GetCurrentProcess
42
60
* Kernel32 : VirtualAlloc
43
61
* Kernel32 : VirtualAllocEx
@@ -51,6 +69,8 @@ Includes :
51
69
* Enumeration : PageProtection
52
70
* Enumeration : TypeAlloc
53
71
* Enumeration: FreeType
72
+ * Enumeration : SectionAccess
73
+ * Enumeration : MappingAttributes
54
74
* Delegates : all functions have been written with delegate style except GetModuleHandle and GetProcAddress
55
75
56
76
TODO :
You can’t perform that action at this time.
0 commit comments