LOLBAS/Shell32.md
2018-09-16 08:04:36 -04:00

1.1 KiB

name description functions resources fullpath notes
shell32.dll Windows Shell Common Dll
execute
description code
Launch DLL payload. rundll32.exe shell32.dll,Control_RunDLL payload.dll
description code
Launch executable payload. rundll32.exe shell32.dll,ShellExec_RunDLL beacon.exe
description code
Launch executable payload with arguments. rundll32 SHELL32.DLL,ShellExec_RunDLL "cmd.exe" "/c echo hi"
resource
https://twitter.com/Hexacorn/status/885258886428725250
resource
https://twitter.com/pabraeken/status/991768766898941953
resource
https://twitter.com/mattifestation/status/776574940128485376
resource
https://twitter.com/KyleHanslovan/status/905189665120149506
resource
https://windows10dll.nirsoft.net/shell32_dll.html
path
c:\windows\system32\shell32.dll
path
c:\windows\syswow64\shell32.dll
Thanks to Adam - @hexacorn (Control_RunDLL), Pierre-Alexandre Braeken - @pabraeken (ShellExec_RunDLL), Matt Graeber - @mattifestation (ShellExec_RunDLL), Kyle Hanslovan - @KyleHanslovan (ShellExec_RunDLL)