DriverNoImage

以shellcode注入其它驱动执行，躲避驱动签名检测，曾pubg项目中使用，，，当然现在，，，

shellcode asm文件通过编译后再通过IDA工具拷贝出来填入ASM文件中有部分测试代码在里面需要做适当修改

Name		Name	Last commit message	Last commit date
DriverNoImage.inf		DriverNoImage.inf
DriverNoImage.vcxproj		DriverNoImage.vcxproj
DriverNoImage.vcxproj.filters		DriverNoImage.vcxproj.filters
DriverNoImage.vcxproj.user		DriverNoImage.vcxproj.user
README.md		README.md
driver.c		driver.c
inlineHook.c		inlineHook.c
inlineHook.h		inlineHook.h
patch.c		patch.c
patch.h		patch.h
patchFun.c		patchFun.c
patchFun.h		patchFun.h
replaceData.c		replaceData.c
replaceData.h		replaceData.h
shellcode.asm		shellcode.asm
shellcode.c		shellcode.c

Navigation Menu