Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- PS A:\SSD\ProjectsVS\Parasite Invoke\Parasite Invoke\bin\Debug> & '.\Parasite Invoke.exe' --path C:\ -r --method VirtualAlloc
- . . . . . . .
- . . _.-/`/`'-._
- . Nice assembly :D . /_..--''''_-'
- . . . . .` //-.__\_\.-'
- `..' _\\\// --.___ // ___.---.._
- _- /@/@\ \ ||`` `-_
- .' ,\_\_/ | \_||_/ ,-._ `.
- ; { o / } " `-._`. ;
- ; `-==-' / \_| ;
- | |>o<| }@@@} |
- | <(___<) }@@@@} |
- | <(___<) }@@@@@} |
- | <\___<) \_.?@@} |
- ; V`--V`__./@} ;
- \ tx ooo@} /
- \ /
- `. .'
- `-._ Parasite Invoke_.-'
- ``------'''''''''------``
- Michael Zhmaylo (github.com/MzHmO)
- -------------
- [FILE] C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.15\UIAutomationClientSideProviders.dll
- Method: VirtualAlloc
- ===PARASITE INVOKE SIGNATURE===
- Assembly asm = Assembly.LoadFrom(@"C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.15\UIAutomationClientSideProviders.dll");
- Type t = asm.GetType("MS.Win32.UnsafeNativeMethods", true);
- var methodInfo = t.GetMethod("VirtualAlloc", System.Reflection.BindingFlags.NonPublic | System.Reflection.BindingFlags.Static );
- System.IntPtr result = (System.IntPtr) methodInfo.Invoke(null, new object[] { IntPtr address, UIntPtr size, int allocationType, int protect });
- ===END SIGNATURE===
- -------------
- -------------
- [FILE] C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.15\WindowsBase.dll
- Method: VirtualAlloc
- ===PARASITE INVOKE SIGNATURE===
- Assembly asm = Assembly.LoadFrom(@"C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.15\WindowsBase.dll");
- Type t = asm.GetType("MS.Win32.UnsafeNativeMethods", true);
- var methodInfo = t.GetMethod("VirtualAlloc", System.Reflection.BindingFlags.NonPublic | System.Reflection.BindingFlags.Static );
- System.IntPtr result = (System.IntPtr) methodInfo.Invoke(null, new object[] { IntPtr lpAddress, UIntPtr dwSize, int flAllocationType, int flProtect });
- ===END SIGNATURE===
- -------------
- -------------
- [FILE] C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.21\UIAutomationClientSideProviders.dll
- Method: VirtualAlloc
- ===PARASITE INVOKE SIGNATURE===
- Assembly asm = Assembly.LoadFrom(@"C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.21\UIAutomationClientSideProviders.dll");
- Type t = asm.GetType("MS.Win32.UnsafeNativeMethods", true);
- var methodInfo = t.GetMethod("VirtualAlloc", System.Reflection.BindingFlags.NonPublic | System.Reflection.BindingFlags.Static );
- System.IntPtr result = (System.IntPtr) methodInfo.Invoke(null, new object[] { IntPtr address, UIntPtr size, int allocationType, int protect });
- ===END SIGNATURE===
- -------------
- -------------
- [FILE] C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.21\WindowsBase.dll
- Method: VirtualAlloc
- ===PARASITE INVOKE SIGNATURE===
- Assembly asm = Assembly.LoadFrom(@"C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.21\WindowsBase.dll");
- Type t = asm.GetType("MS.Win32.UnsafeNativeMethods", true);
- var methodInfo = t.GetMethod("VirtualAlloc", System.Reflection.BindingFlags.NonPublic | System.Reflection.BindingFlags.Static );
- System.IntPtr result = (System.IntPtr) methodInfo.Invoke(null, new object[] { IntPtr lpAddress, UIntPtr dwSize, int flAllocationType, int flProtect });
- ===END SIGNATURE===
- -------------
- -------------
- [FILE] C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.10\UIAutomationClientSideProviders.dll
- Method: VirtualAlloc
- ===PARASITE INVOKE SIGNATURE===
- Assembly asm = Assembly.LoadFrom(@"C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.10\UIAutomationClientSideProviders.dll");
- Type t = asm.GetType("MS.Win32.UnsafeNativeMethods", true);
- var methodInfo = t.GetMethod("VirtualAlloc", System.Reflection.BindingFlags.NonPublic | System.Reflection.BindingFlags.Static );
- System.IntPtr result = (System.IntPtr) methodInfo.Invoke(null, new object[] { IntPtr address, UIntPtr size, int allocationType, int protect });
- ===END SIGNATURE===
- -------------
- -------------
- [FILE] C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.10\WindowsBase.dll
- Method: VirtualAlloc
- ===PARASITE INVOKE SIGNATURE===
- Assembly asm = Assembly.LoadFrom(@"C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.10\WindowsBase.dll");
- Type t = asm.GetType("MS.Win32.UnsafeNativeMethods", true);
- var methodInfo = t.GetMethod("VirtualAlloc", System.Reflection.BindingFlags.NonPublic | System.Reflection.BindingFlags.Static );
- System.IntPtr result = (System.IntPtr) methodInfo.Invoke(null, new object[] { IntPtr lpAddress, UIntPtr dwSize, int flAllocationType, int flProtect });
- ===END SIGNATURE===
- -------------
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement