James Lee e3eef76372 Land #1223 ...

This adds rc4-encrypting stagers for Windows.

[Closes #1223]

2013-04-10 12:14:52 -05:00

..

block

Land #1223

2013-04-10 12:14:52 -05:00

kernel

Forgot the updated build.py, also add in a link to a blog post I wrote for this shellcode.

2010-02-26 14:27:13 +00:00

migrate

Commit the updated APC injection stubs. fixes a nasty issue in some edge cases whereby when using APC injection for a process in another session then the current host process the injected APC can cause an access violation in kernel32 during a call the kernel32!CreateThread caused by the APC's host thread not having an initialized Activation Context inside its TEB. We now test for this and create a dummy ActivationContext entry to appease the kernel. This will both improve DLL injection reliability as well as meterpreter migration reliability.

2010-03-11 17:00:19 +00:00

single

This adds a quick windows/loadlibrary payload for folks who have a need for such things. The library path can be a UNC location and works fine over WebDAV...

2011-05-30 03:44:59 +00:00

stage

Overhaul of the metasploit payloads from Stephen Fewer - smaller/cleaner/new hashing/support for WinNT 4.0 -> Win7 with size reductions for the stagers and minimal size increases for the singles

2009-07-31 17:50:10 +00:00

stager

Whitespace

2013-04-10 09:28:45 -05:00

hash.py

Overhaul of the metasploit payloads from Stephen Fewer - smaller/cleaner/new hashing/support for WinNT 4.0 -> Win7 with size reductions for the stagers and minimal size increases for the singles

2009-07-31 17:50:10 +00:00

test_rc4.asm

Whitespace

2013-04-10 09:28:45 -05:00