Open M1ck3yS3c opened 3 years ago
Hi, you mentioned C# Implant but have selected the Posh shellcode. Have you tried the Sharp_v4_x64 shellcode varients
Hello! I tried using the Sharp_v4_x64 shellcode with the code I shared below and I do not get an implant back. FYI: Stagefull shellcodes from msfvenom work without any issue using the same code attached.
Description
Using Posh_v4_x64_Shellcode.bin in a Dropper leveraging Process Hollowing tradecraft (See file attached below) doesn't return an implant
Execution Environment:
All of this must be filled in Data | Value Windows 10 Pro | Version 20H2 PoshC2 | v7.4.0
Implant Info
C# Shellcode | Posh_v4_x64_Shellcode.bin
Defensive Technologies
Windows Defender Deactivated
To Reproduce
Steps to reproduce the behavior:
Expected behavior
Expected an Implant on PoshC2 Client .
Attach files if required
Program.txt
Additional context