Skip to content

JonLH22/FilelessRemotePE2.0

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

5 Commits
 
 
 
 

Repository files navigation

FilelessRemotePE

Loading Fileless Remote PE from URI to memory with argument passing and ETW patching and NTDLL unhooking and No New Thread technique
It runs only c/c++/asm based binaries , if you want to run .NET based binaries use my other project : https://github.com/D1rkMtr/ExecRemoteAssembly

ThisFileLess

As shown in the Image:
The command line of the Remote PE is exacly the same as this command line.
Run the Loader with the arguments of the Remote PE
The URI of the remote server comes then
I invited u to solve that URI passing as arg
Unfortunately the current version , take URI in this form : https://domain.any/PathToPE
i will improve it to accept this type : [http/https]://IPv4:[port]/PathToPE sooner .

updated

[http/https]://IPv4:[port]/PathToPE improved :
https:/[IPv4]:[port]/PathToPE also works

image image image

NOTE: Re-upload of FilelessRemotePE; not owned or created by me. Just useful. If D1rkMtr wants me to remove this I will

About

No description, website, or topics provided.

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages