Stephen Fewer c78b87a356 Add support for the ring0 stager_sysenter_hook payload to run its ring3 payload in a new thread in order to preserve/resume the original hijacked ring3 thread. ...

git-svn-id: file:///home/svn/framework3/trunk@9819 4d416f70-5f16-0410-b530-b9f4589650da

2010-07-14 13:43:17 +00:00

..

block

Add a warning, cosmetic comment to asm

2010-04-07 20:51:05 +00:00

kernel

Forgot the updated build.py, also add in a link to a blog post I wrote for this shellcode.

2010-02-26 14:27:13 +00:00

migrate

Commit the updated APC injection stubs. fixes a nasty issue in some edge cases whereby when using APC injection for a process in another session then the current host process the injected APC can cause an access violation in kernel32 during a call the kernel32!CreateThread caused by the APC's host thread not having an initialized Activation Context inside its TEB. We now test for this and create a dummy ActivationContext entry to appease the kernel. This will both improve DLL injection reliability as well as meterpreter migration reliability.

2010-03-11 17:00:19 +00:00

single

Add support for the ring0 stager_sysenter_hook payload to run its ring3 payload in a new thread in order to preserve/resume the original hijacked ring3 thread.

2010-07-14 13:43:17 +00:00

stage

Overhaul of the metasploit payloads from Stephen Fewer - smaller/cleaner/new hashing/support for WinNT 4.0 -> Win7 with size reductions for the stagers and minimal size increases for the singles

2009-07-31 17:50:10 +00:00

stager

Small patch to enable a new stager

2010-04-03 05:21:15 +00:00

hash.py

Overhaul of the metasploit payloads from Stephen Fewer - smaller/cleaner/new hashing/support for WinNT 4.0 -> Win7 with size reductions for the stagers and minimal size increases for the singles

2009-07-31 17:50:10 +00:00