dledda-r7
b85ceb0c36
fix(injection): fix arch support logic
2024-10-30 13:28:10 -05:00
dledda-r7
7d4349047f
fix(injection): fix arch support logic
2024-10-30 12:15:11 -04:00
dledda-r7
f34bb48b29
fix(injection): fix arch support logic
2024-10-30 12:15:10 -04:00
dledda-r7
8e533ec9fa
fix(injection): fix msvc compilation error
2024-10-30 12:15:10 -04:00
dledda-r7
a7485082ca
fix(injection): review changes
2024-10-30 12:15:10 -04:00
dledda-r7
ff182d10c4
fix(injection): review changes
2024-10-30 12:15:09 -04:00
dledda-r7
1b65a58ee7
fix(injection): review changes
2024-10-30 12:15:09 -04:00
dledda-r7
00d1a7218a
fix(injection): review changes
2024-10-30 12:15:09 -04:00
dledda-r7
1ebf2acbc2
fix(injection): review changes
2024-10-30 12:15:08 -04:00
dledda-r7
ae96c17e3d
fix(injection): review changes
2024-10-30 12:15:08 -04:00
dledda-r7
3fff5a09ff
docs(shellcode): add reference to poolparty stub
2024-10-30 12:15:08 -04:00
dledda-r7
37c61a2cb5
fix(injection): fix mingw compilation error
2024-10-30 12:15:07 -04:00
dledda-r7
cc408de7a6
feat(injection): improved system check to ensure poolparty is supported, removed unused variants, better code to execute variants
2024-10-30 12:15:07 -04:00
dledda-r7
86b7920c77
fix(shellcode): removed unused shellcodes, updated poolparty_stub_x64
2024-10-30 12:15:06 -04:00
dledda-r7
b18df9c9fe
fix: handling WoW64 injection destinationArch
2024-10-30 12:15:06 -04:00
dledda-r7
a97444d79c
feat: attempt to have x64->wow64 injection with tp_direct_insertion
2024-10-30 12:15:06 -04:00
dledda-r7
ebe086f5ea
feat: draft of worker_factory_routine_overwrite technique
2024-10-30 12:15:05 -04:00
dledda-r7
7eab552207
feat: improving remote handles fetching, tp_direct_insertion support wow64->x64 injection
2024-10-30 12:15:05 -04:00
dledda-r7
2a45039182
debug(injection): inject_via_poolparty using remote_tp_direct_insertion
2024-10-30 12:15:05 -04:00
dledda-r7
cba588451d
debug(injection): inject_via_poolparty using remote_tp_wait_insertion
2024-10-30 12:15:04 -04:00
dledda-r7
2af3fe5c67
feat(injection): improving logging and error handling
2024-10-30 12:15:04 -04:00
dledda-r7
9e9bb677fa
feat(injection): improving error handling
2024-10-30 12:15:04 -04:00
dledda-r7
dc30ecc054
feat(injection): updating x86 shellcode
2024-10-30 12:15:03 -04:00
dledda-r7
f1492da090
feat(injection): adjusting SetLastError when injection fails
2024-10-30 12:15:03 -04:00
dledda-r7
b27aed9051
debug(injection): update migration to force pool-party injection with remote_tp_direct_insertion
2024-10-30 12:15:03 -04:00
dledda-r7
c40d08ad33
feat(injection): improving ntdll functions fetch, adding remote_tp_direct_insert variant
2024-10-30 12:15:02 -04:00
dledda-r7
cef2e6cd5e
feat(injection): commenting unused ntdll functions
2024-10-30 12:15:02 -04:00
dledda-r7
af77eda913
feat(injection): adding hTriggerEvent to POOLPARTYCONTEXT
2024-10-30 12:15:02 -04:00
dledda-r7
c6d066fa86
feat(injection): improving x64 shellcode, adding draft x86 shellcode
2024-10-30 12:15:01 -04:00
dledda-r7
25ee5deddf
feat(injection): update base_dispatch to use inject_via_poolparty when possible
2024-10-30 12:15:00 -04:00
dledda-r7
7f66532422
feat(injection): update base_inject to support inject_via_poolparty, added custom stub for x64
2024-10-30 12:15:00 -04:00
dledda-r7
ce387785c8
feat(injection): adding pool-party injection
2024-10-30 12:14:59 -04:00
Ashley Donaldson
a470c4dc3a
Fix edge cases in Python and C meterpreters
2024-09-25 16:28:37 +10:00
Ashley Donaldson
5c2486c003
Treat old-style path separately to new (unescaped) path
2024-09-25 16:28:37 +10:00
Ashley Donaldson
92e9de46ae
Don't use subshell with array arguments
2024-09-25 16:28:37 +10:00
Ashley Donaldson
aa04d88b87
Handle new cmd_exec TLV format
2024-09-25 16:28:37 +10:00
dledda-r7
a6da6ddac6
Land #713 , Removed GetThreadId and replaced with optional CLIENTID argument
2024-09-20 11:15:19 -04:00
cod
a5c18499a7
C4311: Compiler Warning treated as errors in msvc
2024-09-14 19:21:11 +02:00
dledda-r7
eaf37ada4c
Land #709 , Fix memory leak in request_sys_config_sysinfo
2024-09-13 10:33:11 -04:00
cod
26c3809d6f
removed GetThreadId and replaced with optional CLIENTID argument
2024-08-27 17:35:21 +02:00
cod
446b4d18c3
typo in context
2024-08-12 16:03:55 +02:00
cod
4428531701
memory leak in request_sys_config_sysinfo
2024-08-01 10:01:17 +02:00
cod
3332a27af8
typo
2024-08-01 09:03:54 +02:00
Spencer McIntyre
52d58af59a
Update mimikatz to 45c42c71
2024-01-30 16:30:26 -05:00
Christophe De La Fuente
c7abd47585
Update the ReflectiveDLLInjection submodule to the upstream repository
2024-01-19 17:43:25 +01:00
Christophe De La Fuente
83fa146f75
Update ReflectiveDLLInjection submodule to pull in new trampoline detection logic
2024-01-16 18:27:36 +01:00
Christophe De La Fuente
1556007bfd
Update ReflectiveDLLInjection submodule to pull in Win10/8 x86 fix
2024-01-12 19:24:01 +01:00
Christophe De La Fuente
a5e33d167d
Remove include DirectSyscall.c
2024-01-10 15:01:19 +01:00
Christophe De La Fuente
7082431dae
Pull in changes from ReflectiveDLLInjection to support direct syscalls
...
- Includes ColdGate.c in each project
- Change railgun macro name to stdcall_func
- Update VS configs
- Update cmake files for mingw
- Fix cmake files for kiwi builds
- Update ReflectiveDLLInjection module to verify if CI passes
- Update include file names & ReflectiveDLLInjection submodule
2024-01-08 18:53:17 +01:00
sjanusz-r7
aeb6945bd2
Fix incorrect Memory Search variable name
2024-01-08 10:10:16 +00:00
