Inicio Explorar Axuda
Iniciar sesión
zhensolid
/
OperatorsKit
1
0
Fork 0
Ficheiros Incidencias 0 Pull Requests 0 Wiki
Rama: main
Ramas Etiquetas
OperatorsKit
/
KIT
/
EnumRWX
RTO 75c6c241e6 QoL update %!s(int64=2) %!d(string=hai) anos
..
README.md 75c6c241e6 QoL update %!s(int64=2) %!d(string=hai) anos
beacon.h 75c6c241e6 QoL update %!s(int64=2) %!d(string=hai) anos
bofcompile.bat 75c6c241e6 QoL update %!s(int64=2) %!d(string=hai) anos
enumrwx.c 75c6c241e6 QoL update %!s(int64=2) %!d(string=hai) anos
enumrwx.cna 75c6c241e6 QoL update %!s(int64=2) %!d(string=hai) anos
enumrwx.h 75c6c241e6 QoL update %!s(int64=2) %!d(string=hai) anos
enumrwx.o 75c6c241e6 QoL update %!s(int64=2) %!d(string=hai) anos

README.md

EnumRWX

Find processes that already have memory allocated for read/write/execute (like most .NET processes).

Options

  • <pid>: specify target process ID to enumerate.

Usage

  • enumrwx <pid>

Compile

  • 1. Make sure Visual Studio is installed and supports C/C++.
  • 2. Open the x64 Native Tools Command Prompt for VS <2019/2022> terminal.
  • 3. Run the bofcompile.bat script to compile the object file.
  • 4. In Cobalt strike, use the script manager to load the .cna script to import the tool.