srdi

Documentation

Index

• func DLLToReflectiveShellcode(dllBytes []byte, functionName string, clearHeader bool, userDataStr string) (shellcode []byte)

Functions

func DLLToReflectiveShellcode

func DLLToReflectiveShellcode(dllBytes []byte, functionName string, clearHeader bool, userDataStr string) (shellcode []byte)

DLLToReflectiveShellcode will convert an existing Windows DLL to position independent shellcode that contains a reflective loader to load and execute the shellcode in-memory. The function code is adapted from the work by Leo Loobeek at: https://gist.githubusercontent.com/leoloobeek/c726719d25d7e7953d4121bd93dd2ed3/raw/05f20bae7aa6cd21e20a52034b9547a19e211c5e/ShellcodeRDI.go The work by Leo Loobeek is based on the sRDI project by Nick Landers (@monoxgas) at https://github.com/monoxgas/sRDI/ The work done by Nick Landers is based on the work by Dan Staples which is based on the work by Stephen Fewer The work done by Nick Landers regarding Position Independent Code (PIC) is based on the work by Matthew Graeber The work done by Matthew Graeber is based on the work by Alan Turing Lastly, invoking the name of the Lee Christensen is used for good luck and pwnage dllPath is a the file path, as a string, of the source DLL to convert to reflective shellcode functionName is the name of the function to call after DllMain (optional) clearHeader will remove the PE header if set to true (optional) userDataStr is used to define any arguments that should be called with the injected DLL (optional)