An modern 64-bit position independent implant template.
#include <Common.h>
#include <Constexpr.h>
FUNC VOID Main(
_In_ PVOID Param
) {
STARDUST_INSTANCE
PVOID Message = { 0 };
//
// resolve kernel32.dll related functions
//
if ( ( Instance()->Modules.Kernel32 = LdrModulePeb( H_MODULE_KERNEL32 ) ) ) {
if ( ! ( Instance()->Win32.LoadLibraryW = LdrFunction( Instance()->Modules.Kernel32, HASH_STR( "LoadLibraryW" ) ) ) ) {
return;
}
}
//
// resolve user32.dll related functions
//
if ( ( Instance()->Modules.User32 = Instance()->Win32.LoadLibraryW( L"User32" ) ) ) {
if ( ! ( Instance()->Win32.MessageBoxW = LdrFunction( Instance()->Modules.User32, HASH_STR( "MessageBoxW" ) ) ) ) {
return;
}
}
Message = NtCurrentPeb()->ProcessParameters->ImagePathName.Buffer;
//
// pop da message
//
Instance()->Win32.MessageBoxW( NULL, Message, L"Stardust MessageBox", MB_OK );
}
I have written a Blog post about how it fully works and the reason behind it.
Tookie-osint has a simple-to-use UI and is really straightforward. The main idea of Tookie-osint is…
Be aware, the installation needs technical skills and is not for beginners. Please do not…
The course is primarily intended for those who are professionally involved in or simply interested…
Embark on a 21-day journey to harness the power of Python for Open Source Intelligence…
I've seen multiple projects out there in GitHub, that are crawlers for the deep web,…
OSINTk.o is a customized Kali Linux-based ISO image with pre-installed packages and scripts. The idea…