From 87d6265ae3c54df250c447e753400c7ee4ff810c Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?=E1=9E=90=E0=B2=98=E0=AA=85=E0=B4=9E=EF=AD=84=20=E1=B9=9B?= =?UTF-8?q?=E0=BD=A5=E0=AA=9A?= <42241901+arsium@users.noreply.github.com> Date: Sat, 23 Oct 2021 22:10:33 +0200 Subject: [PATCH] Update README.md --- README.md | 17 +++++++++++++++++ 1 file changed, 17 insertions(+) diff --git a/README.md b/README.md index 141012f..ec14d2d 100644 --- a/README.md +++ b/README.md @@ -9,6 +9,23 @@ I added some test payloads which I've converted with * First with : Donut (https://github.com/TheWover/donut) : turns my payload into raw shellcode * Second with HxD Editor (https://mh-nexus.de/en/downloads.php?product=HxD20) : gives me an array of raw bytes from payloads converted with Donut +How to use it ? + +For same process: + +``` +ShellCodeLoader.ShellCodeLoader cpp = new ShellCodeLoader.ShellCodeLoader(PayloadCpp64.rawData); +cpp.LoadWithKernel32();//can be LoadWithNTDelegates , LoadWithKernel32Delegates or LoadWithNT +cpp.Dispose(); +``` +For other processes: + +``` +Process Target = Process.GetProcessesByName("notepad")[0]; +ShellCodeLoader.ShellCodeLoaderEx cpp = new ShellCodeLoader.ShellCodeLoaderEx(Target, PayloadCpp64.rawData); +cpp.LoadWithKernel32();//or cpp.LoadWithNT(); +cpp.Dispose(); +``` Includes :