Inicio Explorar Axuda
Iniciar sesión
zhensolid
/
OperatorsKit
1
0
Fork 0
Ficheiros Incidencias 0 Pull Requests 0 Wiki
Árbore: 63c2e40ed0
Ramas Etiquetas
OperatorsKit
/
KIT
/
LoadLib
unknown db89d9b285 first commit %!s(int64=2) %!d(string=hai) anos
..
README.md db89d9b285 first commit %!s(int64=2) %!d(string=hai) anos
beacon.h db89d9b285 first commit %!s(int64=2) %!d(string=hai) anos
bofcompile.bat db89d9b285 first commit %!s(int64=2) %!d(string=hai) anos
loadlib.c db89d9b285 first commit %!s(int64=2) %!d(string=hai) anos
loadlib.cna db89d9b285 first commit %!s(int64=2) %!d(string=hai) anos
loadlib.h db89d9b285 first commit %!s(int64=2) %!d(string=hai) anos

README.md

LoadLib

Load a on disk present DLL via RtlRemoteCall API in a remote process. Depending on the process from which you run this tool, it may or may not work.

Options

<pid>: specify the target process to load the DLL into. path: full path to the on disk present DLL.

Usage

loadlib <pid> <path to dll>

Compile

  • 1. Make sure Visual Studio is installed and supports C/C++.
  • 2. Open the x64 Native Tools Command Prompt for VS <2019/2022> terminal.
  • 3. Run the bofcompile.bat script to compile the object file.
  • 4. In Cobalt strike, use the script manager to load the .cna script to import the tool.