KaynLdr

About

KaynLdr is a Reflective Loader written in C / ASM.

Features

• Erases the DOS and NT header
• Library/Api used:
  • ntdll.dll
    • LdrLoadDll
    • NtAllocateVirtualMemory
    • NtProtectVirtualMemory

TODO

• Add Hooks
• x86 support

Credits:

• @NinjaParanoid: PE Reflection: The King is Dead, Long Live the King
• @0xBoku: User Defined Cobalt Strike Loader
• @ilove2pwn_: TitanLdr
• trickster0 TartarusGate direct syscall method