Module_Stomping

Module Stomping 🦀

• Overview
• Usage
• References

Overview

The Module Stomping technique is a way of mapping or loading a DLL in your process or in another process and then retrieving the AddressOfEntryPoint address to replace it with its shellcode and execute it.

Usage

You can run with cargo run or the compiled binary directly:

cargo run

target/release/module_stomping.exe

References

• https://github.com/WithSecureLabs/ModuleStomping
• https://www.ired.team/offensive-security/code-injection-process-injection/modulestomping-dll-hollowing-shellcode-injection