diff --git a/OSLibraries/Shell32.md b/OSLibraries/Shell32.md index 14e8fd4..ee72cf2 100644 --- a/OSLibraries/Shell32.md +++ b/OSLibraries/Shell32.md @@ -6,10 +6,17 @@ rundll32.exe shell32.dll,Control_RunDLL payload.dll rundll32.exe shell32.dll,ShellExec_RunDLL beacon.exe + +rundll32.exe shell32.dll,ShellExec_RunDLLA beacon.exe + +rundll32.exe shell32.dll,ShellExec_RunDLLW beacon.exe + +rundll32.exe shell32.dll,ShellExecuteEx beacon.exe ``` Acknowledgements: * Pierre-Alexandre Braeken - @pabraeken (ShellExec_RunDLL) +* Vincent Yiu - @vysecurity (ShellExec_RunDLLA, ShellExec_RunDLLW, ShellExecuteEx) Code sample: *