TheBarret
/ Suscall.cs
Created
August 3, 2021 23:20
— forked from dr4k0nia/Suscall.cs
An example of using x64 syscall shellcode to call NtProtectVirtualMemory
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| using System; | |
| using System.ComponentModel; | |
| using System.Diagnostics; | |
| using System.Runtime.InteropServices; | |
| namespace Code_Projects | |
| { | |
| public unsafe class Suscall | |
| { | |
| [DllImport("kernel32", SetLastError = true)] |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Imports System.IO | |
| Imports System.IO.Compression | |
| Imports System.Security.Cryptography | |
| Imports System.Runtime.InteropServices | |
| Public Module TypeExt | |
| <System.Runtime.CompilerServices.Extension> | |
| Public Function QuickCast(Of T)(src As Byte()) As Object | |
| Dim dataPtr As IntPtr = IntPtr.Zero | |
| Try | |
| If src.Length <> 0 Then |