OJ
7c5e7e930c
Fix typo in ReflectiveLoader comment
2013-09-12 07:25:18 +10:00
OJ
03706b842f
Reflective DLL Injection update, bugfix and tidy
...
* Pulled source from Stephen Fewer which contains a few updates including
support for Windows RT.
* Added Stephen Fewer's fix which includes a correct pointer size for the
reflective DLL loader function.
* Added ENABLE_STOPAGING to allow toggling of VirtualLock() call (defined
by default).
* Added ENABLE_OUTPUTDEBUG to allow toggling of calls to pOutputDebug
(undefined by default).
* Remove more warnings in some areas of the code.
2013-09-10 17:36:49 +10:00
OJ
87031e0d00
Work towards a clean build
...
* Various code fixes to keep the compiler warnings down.
* Adjustments to project files.
2013-09-03 16:49:09 +10:00
Meatballs
39872d239b
Working comms
2013-04-19 22:18:44 +01:00
Meatballs
21e2b1fecf
Tidy
2013-04-19 21:45:33 +01:00
Meatballs
979e22f774
Compiles with Release
2013-04-19 19:36:40 +01:00
James Lee
7283131279
Initial source import from metasploit-framework
2012-11-19 16:46:07 -06:00
jlee-r7
964bae0c49
Initial commit
2012-11-19 14:40:03 -08:00
Stephen Fewer
b01441e943
force the eip() function to never be inlined under x64 in order to avoid an error being introduced when some unexpected compiler flags are being used. Now the compiler flags used (/O1, /O2, ...) shouldnt pose any problem
2012-07-02 17:40:57 +01:00
HD Moore
7faaa653ba
Update project
2012-06-24 14:03:57 -05:00
HD Moore
78be47c5d1
Remove left over debug statements
2012-06-24 14:03:56 -05:00
HD Moore
be60c294d0
Checkin new code
2012-06-24 14:03:53 -05:00
HD Moore
cdc46ef14f
Commit EncodePointer stubs as a reference (temporary)
2012-06-24 14:03:52 -05:00
Stephen Fewer
6f25e39b27
Commit all the code for the new 'screenshot' command in the stdapi extension. Screenshot will now work on NT4 - 7 on both x86 and x64 and on newer versions of Windows we can break out of session isolation (e.g. session 0 isolation for services) to screenshot the active desktop (or logon screen) without the need to migrate meterpreter. The majority of the migration code-injection stuff has been refactored out into base_inject.c so it can be shared with the new ps_inject() functionality to inject dlls. The 'ps' command now reports what session each process belongs to (if this is too verbose we can remove it or add a -v verbose switch to the ps command). The 'execute' command can now take a -s switch in order to create a process in a users session under the users privs (assuming you have the privs to do this).
...
git-svn-id: file:///home/svn/framework3/trunk@8787 4d416f70-5f16-0410-b530-b9f4589650da
2010-03-11 17:09:55 +00:00
Stephen Fewer
776b9f108c
Update RDI by adding in the LoadRemoteLibraryR function to use RDI to inject into arbitrary processes. Current limitation is it only works on x86->x86 and x64->x64 scenarios, due to the offsets used in parsing the PE file being determined at compile time (e.g. if we compile LoadRemoteLibraryR into an x86 binary it wont be able to load x64 images). Solution is to not rely on compiler for the offset but to do it manually which shouldn't be too much work.
...
git-svn-id: file:///home/svn/framework3/trunk@8292 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-28 13:37:55 +00:00
Stephen Fewer
96bf84163d
Commit the source code for the cross compilable reflective dll injection module. Some minor modifications to the stdapi extension were also required. All the projects (.vcproj) now have an x64 debug/release target as well as an x86 counterpart.
...
git-svn-id: file:///home/svn/framework3/trunk@7000 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-04 01:53:58 +00:00
HD Moore
7a9c17adec
Updated reflective stuff to match the new hashing function
...
git-svn-id: file:///home/svn/framework3/trunk@6923 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-31 17:57:51 +00:00
HD Moore
1da709b2d9
Merge Stephen Fewer's patches to enable support for Windows 7 (fixes support for NT and 2000 as well)
...
git-svn-id: file:///home/svn/framework3/trunk@6744 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-05 20:24:37 +00:00
HD Moore
fa51ea5d15
Swapping in the latest patched copy of Meterpreter. See #275
...
git-svn-id: file:///home/svn/framework3/trunk@6357 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-22 18:56:28 +00:00
