ryze-t / cdb-wds Goto Github PK

onecore\windows\core\console\open\src\renderer\gdi\state.cpp(245)\conhost.exe!00007FF6506F5477: (caller: 00007FF6506F3FF7) LogHr(1) tid(1990) 80004005 未指定的错误

很酷的项目，免杀思路很赞！

不过测试 HTTP/HTTPS 的 Shellcode 似乎调用失败，没有建立连接，是否有办法解决这个问题？

defender也告警了，但关了defender还是连不上

Good!

C:\Users\root\Desktop>cdb.exe -pd -cf shell.wds -o notepad.exe
No .natvis files found at C:\Windows\SYSTEM32\Visualizers.
No .natvis files found at C:\Users\root\AppData\Local\Dbg\Visualizers.

Microsoft (R) Windows Debugger Version 10.0.19041.1503 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.

CommandLine: notepad.exe
Unable to add extension DLL: ntsdexts
Unable to add extension DLL: uext
Unable to add extension DLL: exts
SECURE: File not allowed to be loaded - C:\Windows\SYSTEM32\dbghelp.dll
Error code: Win32 error 0n5
The call to LoadLibrary(ext) failed, Win32 error 0n2
"系统找不到指定的文件。"
Please check your debugger configuration and/or network access.

控制端退出，被控端会弹出崩溃的窗口，可以不弹么

测试机：win10 10.0.19044.1586
运行后弹窗报错，重启后系统关联崩溃，CMD、资源管理器图标变白，系统管理报错...
重做系统了，怀疑和系统版本有关？