Skip to content
This repository was archived by the owner on Jan 21, 2021. It is now read-only.

Invoke-ReflectivePEInjection: NtCreateThreadEx isn't exported in WinXP #92

Closed
PowerShellMafia opened this issue Dec 15, 2015 · 1 comment
Closed

Invoke-ReflectivePEInjection: NtCreateThreadEx isn't exported in WinXP #92

PowerShellMafia opened this issue Dec 15, 2015 · 1 comment
Labels
bug
Milestone
3.0 release

Comments

@PowerShellMafia
Copy link
Collaborator

This issue affects Invoke-ReflectivePEInjection and any code that relies upon it (e.g. Invoke-Mimikatz). Invoke-ReflectivePEInjection should not attempt to resolve the address for NtCreateThreadEx if it is running XP. NtCreateThreadEx is only ever used for Win Vista and Win 7 anyway. This will cause an exception to be thrown in XP.
@PowerShellMafia PowerShellMafia self-assigned this Dec 15, 2015
@PowerShellMafia PowerShellMafia added this to the 3.0 release milestone Dec 15, 2015
mattifestation pushed a commit that referenced this issue Dec 15, 2015
Bugfix #92: perform OS check when importing NtCreateThreadEx
ce3b216
@PowerShellMafia
Copy link
Collaborator Author

Fixed

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Assignees
No one assigned
Labels
bug
Projects
None yet
Milestone
3.0 release
Development

No branches or pull requests
0 participants