search

fortra / No-Consolation

A BOF that runs unmanaged PEs inline
https://www.coresecurity.com/core-labs/articles/running-pes-inline-without-console
MIT License
549 stars 64 forks source link

BaseGetConsoleReference not found #1

Closed funnybananas closed 6 months ago

funnybananas commented 6 months ago

Received error message when running debug version: "The address of 'BaseGetConsoleReference' was not found"

Looking at the exported functions of KernelBase.dll shows no "BaseGetConsoleReference" function. It seems that it was present on earlier versions though (after some google searching).

S4ntiagoP commented 6 months ago

Hi there, what version of Windows are you running?

funnybananas commented 6 months ago

Hi! Very fast response lol

This error was encountered on Windows Server 2016 build 14393.

I did just see that on another system running Windows 10 build 19045 that KernelBase.dll DOES export BaseGetConsoleReference

S4ntiagoP commented 6 months ago

Ok, interesting, would you mind sharing both KernelBase.dll files? You can talk to me on Twitter if you want an email address to send them to.

funnybananas commented 6 months ago

shoot me a follow and i'll be able to DM you

funnybananas commented 6 months ago

To follow-up, this error does not appear on Windows 10 or Windows Server 2019. So far I've only encountered it on Server 2016.

S4ntiagoP commented 6 months ago

Closing this, reopen if needed. Thank you for reporting!