SharpSploit icon indicating copy to clipboard operation
SharpSploit copied to clipboard

Published 20 hours ago • verified publisher icon cobbr

SharpSploit.Execution.PE fix

Open who1smrrobot opened this issue 3 years ago • 3 comments

@cobbr

Do you have any view on when the SharpSploit.Execution.PE.Load() method will be fixed? Or could you or someone else provide some hints on where the issue currently is?

I honestly am not that super expert in WIN32 API's but with some hints on where the current issue is, I could at least try to hunt for a fix.

Just spent the whole afternoon in looking for a currently working option to execute PE files reflective from a C# assembly, but there seems to be no working solution. The peloader.cs which is also based on the work from subtee is also not working..

https://github.com/Arno0x/CSharpScripts/blob/master/peloader.cs

who1smrrobot avatar May 30 '21 15:05 who1smrrobot

@who1smrrobot is this in relation to another issue?

rasta-mouse avatar May 30 '21 16:05 rasta-mouse

No, I just checked the repo and the PE class seems to no longer exist, so the SharpSploit - Quick Command Reference.md isn't up2date.

However, I was wondering if there are any plans to develop a class which allows the in memory execution of PE files which are not .NET assemblies?

who1smrrobot avatar May 30 '21 18:05 who1smrrobot

I believe the PE class was removed in favour of the newer D/Invoke code: c75adc02f5f585aa9f96f871a3372f2fdc653c83

rasta-mouse avatar May 31 '21 10:05 rasta-mouse