jfmaes/Invoke-DLLClone

Exports table is not from the source file

Barriuso opened this issue · 2 comments

I'm trying to make a DLL Sideload with a Toshiba binary that loads TosBtKbd.dll.

This is the export table from TosBtKbd.dll.
image

I just want to try with a dll that pops calc.exe.

image

At the end of the process, the dll exports table is from the target file not the one from source.

image

I've tried other target dlls as beacon.dll, but the program has the same behaviour.

can you try again?
seems like I accidentaly introduced a bit of parameter confusion in the script, pushed a fix now, please retest

Yes. Now it works. I've popped my shell.
Thanks for your quick response.