Skip to content

Commit 9bf4180

Browse files
committed
v0.14.0
1 parent 41f38d9 commit 9bf4180

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

README.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -25,7 +25,7 @@ The tool's execution is focused on stealth and efficiency, built around a **Dire
2525
* It allocates memory using `NtAllocateVirtualMemory`.
2626
* It writes the decrypted payload DLL into the allocated space with `NtWriteVirtualMemory`.
2727
* It changes the memory region's permissions to executable using `NtProtectVirtualMemory`.
28-
* It creates a **named pipe** for C2 communication and writes the pipe's name into the target's memory.
28+
* It creates a **named pipe** for communication and writes the pipe's name into the target's memory.
2929
5. **Execution & Control:** A new thread is created in the target process using `NtCreateThreadEx`. The thread's start address points directly to the payload's `ReflectiveLoader` export, with the address of the remote pipe name as its argument. The original main thread of the browser remains suspended and is never resumed. The injector then waits for the payload to connect back to the pipe.
3030

3131
### **Stage 2: The Injected Payload (In-Memory)**

0 commit comments

Comments
 (0)