Using PEB Masquerading

Cn33liz · Sep 26, 2016 · 0e3d465 · 0e3d465
1 parent 2616624
commit 0e3d465
Show file tree

Hide file tree

Showing 16 changed files with 332 additions and 1,334 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -0,0 +1,7 @@
+#### Version 1.1:
+
+* Replaced IFileOperation DLL injection for a PEB Masquerade method.
+
+#### Version 1.0:
+
+* First Public Release.
diff --git a/IFileOperation/IFileOperation.cpp b/IFileOperation/IFileOperation.cpp
diff --git a/IFileOperation/IFileOperation.vcxproj b/IFileOperation/IFileOperation.vcxproj
diff --git a/IFileOperation/IFileOperation.vcxproj.filters b/IFileOperation/IFileOperation.vcxproj.filters
diff --git a/IFileOperation/IFileOperation.vcxproj.user b/IFileOperation/IFileOperation.vcxproj.user
diff --git a/IFileOperation/stdafx.cpp b/IFileOperation/stdafx.cpp
diff --git a/IFileOperation/stdafx.h b/IFileOperation/stdafx.h
diff --git a/IFileOperation/targetver.h b/IFileOperation/targetver.h
diff --git a/README.md b/README.md
@@ -5,7 +5,7 @@
   / / / /_/ / / / / / // // / / / / /_
  /_/ / .___/_/ /_/ /_/___/_/ /_/_/\__/
     /_/
-                    UAC Suicide Squad
+               UAC Suicide Squad v1.1
                       By Cn33liz 2016
 ```
 

diff --git a/TpmInitUACBypass.sln b/TpmInitUACBypass.sln
@@ -7,8 +7,6 @@ Project("{8BC9CEB8-8B4A-11D0-8D11-00A0C91BC942}") = "wbemcomn", "wbemcomn\wbemco
 EndProject
 Project("{8BC9CEB8-8B4A-11D0-8D11-00A0C91BC942}") = "TpmInitUACBypass", "TpmInitUACBypass\TpmInitUACBypass.vcxproj", "{107FE98F-9C9B-4B1B-BC29-CDFED2C01364}"
 EndProject
-Project("{8BC9CEB8-8B4A-11D0-8D11-00A0C91BC942}") = "IFileOperation", "IFileOperation\IFileOperation.vcxproj", "{C933A4B7-4650-4761-B50A-9EEEF15D2FF4}"
-EndProject
 Project("{8BC9CEB8-8B4A-11D0-8D11-00A0C91BC942}") = "MsfStager", "MsfStager\MsfStager.vcxproj", "{20244E23-742B-40B4-A203-D04032340F13}"
 EndProject
 Global
@@ -35,14 +33,6 @@ Global
 		{107FE98F-9C9B-4B1B-BC29-CDFED2C01364}.Release|x64.Build.0 = Release|x64
 		{107FE98F-9C9B-4B1B-BC29-CDFED2C01364}.Release|x86.ActiveCfg = Release|Win32
 		{107FE98F-9C9B-4B1B-BC29-CDFED2C01364}.Release|x86.Build.0 = Release|Win32
-		{C933A4B7-4650-4761-B50A-9EEEF15D2FF4}.Debug|x64.ActiveCfg = Debug|x64
-		{C933A4B7-4650-4761-B50A-9EEEF15D2FF4}.Debug|x64.Build.0 = Debug|x64
-		{C933A4B7-4650-4761-B50A-9EEEF15D2FF4}.Debug|x86.ActiveCfg = Debug|Win32
-		{C933A4B7-4650-4761-B50A-9EEEF15D2FF4}.Debug|x86.Build.0 = Debug|Win32
-		{C933A4B7-4650-4761-B50A-9EEEF15D2FF4}.Release|x64.ActiveCfg = Release|x64
-		{C933A4B7-4650-4761-B50A-9EEEF15D2FF4}.Release|x64.Build.0 = Release|x64
-		{C933A4B7-4650-4761-B50A-9EEEF15D2FF4}.Release|x86.ActiveCfg = Release|Win32
-		{C933A4B7-4650-4761-B50A-9EEEF15D2FF4}.Release|x86.Build.0 = Release|Win32
 		{20244E23-742B-40B4-A203-D04032340F13}.Debug|x64.ActiveCfg = Debug|x64
 		{20244E23-742B-40B4-A203-D04032340F13}.Debug|x64.Build.0 = Debug|x64
 		{20244E23-742B-40B4-A203-D04032340F13}.Debug|x86.ActiveCfg = Debug|Win32