update process inject execute block
parent
c186280f7d
commit
74969de7f0
|
@ -233,10 +233,19 @@ process-inject {
|
||||||
}
|
}
|
||||||
|
|
||||||
execute {
|
execute {
|
||||||
CreateThread "ntdll!RtlUserThreadStart";
|
#CreateThread;
|
||||||
CreateThread;
|
#CreateRemoteThread;
|
||||||
NtQueueApcThread;
|
|
||||||
CreateRemoteThread;
|
CreateThread "ntdll.dll!RtlUserThreadStart+0x1000";
|
||||||
|
|
||||||
|
SetThreadContext;
|
||||||
|
|
||||||
|
NtQueueApcThread-s;
|
||||||
|
|
||||||
|
#NtQueueApcThread;
|
||||||
|
|
||||||
|
CreateRemoteThread "kernel32.dll!LoadLibraryA+0x1000";
|
||||||
|
|
||||||
RtlCreateUserThread;
|
RtlCreateUserThread;
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
Loading…
Reference in New Issue