README.md

Shellcode Loader

Allocate memory for executing shellcode later.

Overview

Alokasi dengan NtAllocateVirtualMemory dan dealokasi dengan NtFreeVirtualMemory.

NTSTATUS NtAllocateVirtualMemory (HANDLE ProcessHandle, PVOID BaseAddress, ULONG ZeroBits, PULONG RegionSize, ULONG AllocationType, ULONG Protect);

NTSTATUS NtProtectVirtualMemory (HANDLE ProcessHandle, PVOID * BaseAddress, PULONG NumberOfBytesToProtect, ULONG NewAccessProtection, PULONG OldAccessProtection);

NTSTATUS NtFreeVirtualMemory (HANDLE ProcessHandle, PVOID * BaseAddress, PULONG RegionSize, ULONG FreeType);

Reference

• NTInternals NtAllocateVirtualMemory
• NTInternals NtProtectVirtualMemory
• NTInternals NtFreeVirtualMemory