search

bats3c / shad0w

A post exploitation framework designed to operate covertly on heavily monitored environments
https://blog.dylan.codes/shad0w/
MIT License
2.03k stars 323 forks source link

Fix missing dependencies in secure beacons #32

Closed bblenard closed 4 years ago

bblenard commented 4 years ago

In some cases the _LdrLoadDll function would be given DllName's with mixed cases and or different casing than what was listed in the AllowedDll array in main.h. This change changes the strcmp call to _stricmp to ignore differences in casing while loading dlls. This shouldn't make a difference in terms of security since windows file paths are case insensitive by default.

Closes #20

bats3c commented 4 years ago

Nice stuff