Skip to content

Commit b84379a

Browse files
committed
Note about EXE::Custom
1 parent e9c7866 commit b84379a

File tree

1 file changed

+2
-0
lines changed

1 file changed

+2
-0
lines changed

modules/exploits/windows/local/bypassuac_injection.rb

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -24,6 +24,8 @@ def initialize(info={})
2424
technique to drop only the DLL payload binary instead of three seperate
2525
binaries in the standard technique. However, it requires the correct
2626
architecture to be selected, (use x64 for SYSWOW64 systems also).
27+
If specifying EXE::Custom your DLL should call ExitProcess() after starting
28+
your payload in a seperate process.
2729
},
2830
'License' => MSF_LICENSE,
2931
'Author' => [

0 commit comments

Comments
 (0)