Advertisement
AttackingDirectory

Untitled

Mar 7th, 2024
993
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
Bash 5.46 KB | Source Code | 0 0
  1. PS A:\SSD\ProjectsVS\Parasite Invoke\Parasite Invoke\bin\Debug> & '.\Parasite Invoke.exe' --path C:\ -r --method VirtualAlloc
  2.  
  3.  
  4.      . .  .  .  . . .
  5.    .                  .                  _.-/`/`'-._
  6.   . Nice assembly :D .                /_..--''''_-'
  7.     .  .  .  .      .`                //-.__\_\.-'
  8.                `..'  _\\\//  --.___ // ___.---.._
  9.                   _- /@/@\  \       ||``          `-_
  10.                 .'  ,\_\_/   |    \_||_/      ,-._   `.
  11.               ;   { o    /   }     "        `-._`.   ;
  12.              ;     `-==-'   /                    \_|   ;
  13.              |        |>o<|  }@@@}                       |
  14.              |       <(___<) }@@@@}                      |
  15.              |       <(___<) }@@@@@}                     |
  16.              |        <\___<) \_.?@@}                    |
  17.               ;         V`--V`__./@}                    ;
  18.                \      tx      ooo@}                    /
  19.                 \                                     /
  20.                  `.                                 .'
  21.                   `-._          Parasite Invoke_.-'
  22.                        ``------'''''''''------``
  23.  
  24.  
  25.                Michael Zhmaylo (github.com/MzHmO)
  26. -------------
  27. [FILE] C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.15\UIAutomationClientSideProviders.dll
  28.  
  29. Method: VirtualAlloc
  30.        ===PARASITE INVOKE SIGNATURE===
  31.        Assembly asm = Assembly.LoadFrom(@"C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.15\UIAutomationClientSideProviders.dll");
  32.        Type t = asm.GetType("MS.Win32.UnsafeNativeMethods", true);
  33.        var methodInfo = t.GetMethod("VirtualAlloc", System.Reflection.BindingFlags.NonPublic | System.Reflection.BindingFlags.Static );
  34.        System.IntPtr result = (System.IntPtr) methodInfo.Invoke(null, new object[] { IntPtr address, UIntPtr size, int allocationType, int protect });
  35.        ===END SIGNATURE===
  36. -------------
  37. -------------
  38. [FILE] C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.15\WindowsBase.dll
  39.  
  40. Method: VirtualAlloc
  41.        ===PARASITE INVOKE SIGNATURE===
  42.        Assembly asm = Assembly.LoadFrom(@"C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.15\WindowsBase.dll");
  43.        Type t = asm.GetType("MS.Win32.UnsafeNativeMethods", true);
  44.        var methodInfo = t.GetMethod("VirtualAlloc", System.Reflection.BindingFlags.NonPublic | System.Reflection.BindingFlags.Static );
  45.        System.IntPtr result = (System.IntPtr) methodInfo.Invoke(null, new object[] { IntPtr lpAddress, UIntPtr dwSize, int flAllocationType, int flProtect });
  46.        ===END SIGNATURE===
  47. -------------
  48. -------------
  49. [FILE] C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.21\UIAutomationClientSideProviders.dll
  50.  
  51. Method: VirtualAlloc
  52.        ===PARASITE INVOKE SIGNATURE===
  53.        Assembly asm = Assembly.LoadFrom(@"C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.21\UIAutomationClientSideProviders.dll");
  54.        Type t = asm.GetType("MS.Win32.UnsafeNativeMethods", true);
  55.        var methodInfo = t.GetMethod("VirtualAlloc", System.Reflection.BindingFlags.NonPublic | System.Reflection.BindingFlags.Static );
  56.        System.IntPtr result = (System.IntPtr) methodInfo.Invoke(null, new object[] { IntPtr address, UIntPtr size, int allocationType, int protect });
  57.        ===END SIGNATURE===
  58. -------------
  59. -------------
  60. [FILE] C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.21\WindowsBase.dll
  61.  
  62. Method: VirtualAlloc
  63.        ===PARASITE INVOKE SIGNATURE===
  64.        Assembly asm = Assembly.LoadFrom(@"C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.21\WindowsBase.dll");
  65.        Type t = asm.GetType("MS.Win32.UnsafeNativeMethods", true);
  66.        var methodInfo = t.GetMethod("VirtualAlloc", System.Reflection.BindingFlags.NonPublic | System.Reflection.BindingFlags.Static );
  67.        System.IntPtr result = (System.IntPtr) methodInfo.Invoke(null, new object[] { IntPtr lpAddress, UIntPtr dwSize, int flAllocationType, int flProtect });
  68.        ===END SIGNATURE===
  69. -------------
  70. -------------
  71. [FILE] C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.10\UIAutomationClientSideProviders.dll
  72.  
  73. Method: VirtualAlloc
  74.        ===PARASITE INVOKE SIGNATURE===
  75.        Assembly asm = Assembly.LoadFrom(@"C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.10\UIAutomationClientSideProviders.dll");
  76.        Type t = asm.GetType("MS.Win32.UnsafeNativeMethods", true);
  77.        var methodInfo = t.GetMethod("VirtualAlloc", System.Reflection.BindingFlags.NonPublic | System.Reflection.BindingFlags.Static );
  78.        System.IntPtr result = (System.IntPtr) methodInfo.Invoke(null, new object[] { IntPtr address, UIntPtr size, int allocationType, int protect });
  79.        ===END SIGNATURE===
  80. -------------
  81. -------------
  82. [FILE] C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.10\WindowsBase.dll
  83.  
  84. Method: VirtualAlloc
  85.        ===PARASITE INVOKE SIGNATURE===
  86.        Assembly asm = Assembly.LoadFrom(@"C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.10\WindowsBase.dll");
  87.        Type t = asm.GetType("MS.Win32.UnsafeNativeMethods", true);
  88.        var methodInfo = t.GetMethod("VirtualAlloc", System.Reflection.BindingFlags.NonPublic | System.Reflection.BindingFlags.Static );
  89.        System.IntPtr result = (System.IntPtr) methodInfo.Invoke(null, new object[] { IntPtr lpAddress, UIntPtr dwSize, int flAllocationType, int flProtect });
  90.        ===END SIGNATURE===
  91. -------------
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement