From 0ee8cfae2b7d76bc65e0e729862d709d54df42bd Mon Sep 17 00:00:00 2001 From: caseysmithrc <30840394+caseysmithrc@users.noreply.github.com> Date: Wed, 25 Apr 2018 10:57:23 -0600 Subject: [PATCH] Update AtomicSSLHook.cpp --- Windows/Payloads/Hooking/AtomicSSLHook.cpp | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Windows/Payloads/Hooking/AtomicSSLHook.cpp b/Windows/Payloads/Hooking/AtomicSSLHook.cpp index 9cc44415..7e1a776c 100644 --- a/Windows/Payloads/Hooking/AtomicSSLHook.cpp +++ b/Windows/Payloads/Hooking/AtomicSSLHook.cpp @@ -15,7 +15,7 @@ BYTE bSavedByte2; //Saved Byte Overwritten by 0xCC - // https://0x00sec.org/t/user-mode-rootkits-iat-and-inline-hooking/1108 // PoC by Casey Smith @subTee // From PowerShell -// mavinject.exe $pid /INJECTRUNNING C:\AtomicTests\MemMITM.dll +// mavinject.exe $pid /INJECTRUNNING C:\AtomicTests\AtomicSSLHookx64.dll // curl https://www.example.com // Should Hook and Display Request/Response from HTTPS