Add words for randomize case on methods and function names for the Am…

…si bypass
Hackplayers · Oct 8, 2024 · 7eb8a9f · 7eb8a9f
1 parent de0ea50
commit 7eb8a9f
Showing 1 changed file with 11 additions and 1 deletion.
diff --git a/evil-winrm.rb b/evil-winrm.rb
@@ -134,7 +134,17 @@ def initialize
       'Reflection.BindingFlags',
       'NonPublic',
       'Static',
-      'GetValue'
+      'GetValue',
+      'LookupFunc',
+      'AppDomain',
+      'CurrentDomain',
+      'GetAssemblies',
+      'getDelegateType',
+      'DefineConstructor',
+      'Reflection.AssemblyName',
+      'DefineMethod',
+      'GetDelegateForFunctionPointer',
+      'MakeByRefType'
     ]
   end