update process inject execute block

master
xx0hcd 2019-09-10 12:57:12 -05:00 committed by GitHub
parent c186280f7d
commit 74969de7f0
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 13 additions and 4 deletions

View File

@ -233,10 +233,19 @@ process-inject {
} }
execute { execute {
CreateThread "ntdll!RtlUserThreadStart"; #CreateThread;
CreateThread; #CreateRemoteThread;
NtQueueApcThread;
CreateRemoteThread; CreateThread "ntdll.dll!RtlUserThreadStart+0x1000";
SetThreadContext;
NtQueueApcThread-s;
#NtQueueApcThread;
CreateRemoteThread "kernel32.dll!LoadLibraryA+0x1000";
RtlCreateUserThread; RtlCreateUserThread;
} }
} }