y11en y11en

🍉

Up car

1F Y0U CAN'7 H0DL, Y0U W1LL N0T 8E P00R

masthoon / SystemCMD.cpp

Last active October 3, 2024 18:16

Launch SYSTEM CMD in user current session (from a service)

	#include "stdafx.h"
	#include <windows.h>
	#include <Winbase.h>
	#include <Wtsapi32.h>
	#include <Userenv.h>
	#include <malloc.h>

	#pragma comment(lib, "Wtsapi32.lib")
	#pragma comment(lib, "Userenv.lib")

lucasg / apisetlookup.c

Last active May 24, 2025 04:59

Api set library lookup resolver

	#include <windows.h>
	#include <stdint.h>
	#include <stdbool.h>
	#include <stdio.h>
	#include <sal.h>
	#include <assert.h>

	#ifdef _X86_
	#error "This snippet only build in 64-bit due to heavy use of uintptr arithmetics."
	#endif

w4kfu / dllinjshim.cpp

Last active June 17, 2024 02:12

DLL Injection via Shim

	/*

	-------- dllinjshim.cpp --------

	> cl /Fe:dllinjshim.exe dllinjshim.cpp
	> dllinjshim.exe
	> sdbinst moo.sdb

	/!\ On Windows 10 there is a new function `SdbIsKnownShimDll` called
	in `SdbGetDllPath` which will check the DLL name against the following list:

bcse / scrdec18-VC8.exe

Created February 15, 2012 10:13

Windows Script Decoder 1.8 (Decoding JScript.Encoded)

View raw