Skip to content

Lazy "position independent" payload making technique for Windows

License

Notifications You must be signed in to change notification settings

0xvpr/lazy-payload-poc

Repository files navigation

lazy payload poc


Overview

This is a proof of concept for leveraging the behavior of kernel32 and ntdll kernel loading
in order to write small, executable, shellcode that will run in an arbitrary process.

Demo

[ TODO ]

Building Using Docker (Recommended)

git clone https://github.com/0xvpr/lazy-payload-poc.git lazy-payload-poc && cd lazy-payload-poc
make docker-container
make docker-build