Skip to content

Commit 52b182d

Browse files
committed
Add a small note to bypassuac_injection concerning EXE::Custom
2 parents eeae071 + b84379a commit 52b182d

File tree

1 file changed

+2
-0
lines changed

1 file changed

+2
-0
lines changed

modules/exploits/windows/local/bypassuac_injection.rb

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -24,6 +24,8 @@ def initialize(info={})
2424
technique to drop only the DLL payload binary instead of three seperate
2525
binaries in the standard technique. However, it requires the correct
2626
architecture to be selected, (use x64 for SYSWOW64 systems also).
27+
If specifying EXE::Custom your DLL should call ExitProcess() after starting
28+
your payload in a seperate process.
2729
},
2830
'License' => MSF_LICENSE,
2931
'Author' => [

0 commit comments

Comments
 (0)