Another awesome addition from Joe Bialek. Invoke-ReflectivePEInjection is a vast improvement over Invoke-ReflectiveDllInjection. It adds the following features: * Now supports loading exe files in memory * Supports reflective dll injection into a remote process * Additional sample Visual Studio solutions |
||
|---|---|---|
| .. | ||
| x64 | ||
| x86 | ||
| readme.txt | ||
readme.txt
This contains the assembly code I used to build the shellcode the PowerShell script uses. Some of the assembly isn't included beause I didn't save it, this should just be for the SUPER easy stuff like moving an address to EAX and returning. Compile: x64: nasm -f elf64 FileName.asm ld -o FileName FileName.o objdump -M intel -d FileName x86: nasm FileName.asm ld -o FileName FileName.o objdump -M intel -d FileName