@@ -63,7 +63,7 @@ SHELLCODE execute locally.
63
63
14 . close opened handle using ` CloseHandle `
64
64
65
65
## create_remote_thread
66
- SHELLCODE execute remotely.
66
+ SHELLCODE execute remotely.
67
67
inject ` explorer.exe ` by default.
68
68
1 . get pid by process name using crate ` sysinfo `
69
69
2 . get handle using ` OpenProcess `
@@ -74,7 +74,7 @@ inject `explorer.exe` by default.
74
74
7 . close opened handle using ` CloseHandle `
75
75
76
76
## create_remote_thread_native
77
- SHELLCODE execute remotely.
77
+ SHELLCODE execute remotely.
78
78
inject ` explorer.exe ` by default.
79
79
this is same with [ create_remote_thread] ( #create_remote_thread ) , but without crate ` windows-sys `
80
80
using crate ` libloading ` get functions from dlls.
@@ -93,7 +93,7 @@ this is same with [create_thread](#create_thread), but without crate `windows-sy
93
93
using crate ` libloading ` get functions from dlls.
94
94
95
95
## early_bird
96
- SHELLCODE execute remotely.
96
+ SHELLCODE execute remotely.
97
97
create and inject ` svchost.exe ` by default.
98
98
1 . create a process using ` CreateProcessA `
99
99
2 . alloc remote memory using ` VirtualAllocEx `
@@ -121,7 +121,7 @@ SHELLCODE execute locally.
121
121
5 . execute fn
122
122
123
123
## module_stomping
124
- SHELLCODE execute remotely.
124
+ SHELLCODE execute remotely.
125
125
inject ` notepad.exe ` by default.
126
126
1 . get pid by process name using crate ` sysinfo `
127
127
2 . get handle using ` OpenProcess `
@@ -148,7 +148,7 @@ SHELLCODE execute locally.
148
148
6 . execute SHELLCODE using ` NtQueueApcThreadEx `
149
149
150
150
## rtl_create_user_thread
151
- SHELLCODE execute remotely.
151
+ SHELLCODE execute remotely.
152
152
inject ` explorer.exe ` by default.
153
153
1 . get ` RtlCreateUserThread ` funtion from ` ntdll ` using ` LoadLibraryA ` and ` GetProcAddress `
154
154
2 . get pid by process name using crate ` sysinfo `
0 commit comments