demo unhook + persist + inject

usage

basic execution

# perform all operations
./syshash.exe

demo unhook

usage

basic execution

# run shellcode injection test
./syshash.exe

# enable debug output
./syshash.exe -debug

# dump ntdll functions to files
./syshash.exe -dump

# unhook ntdll and keep process running
./syshash.exe -unhook

# unhook with debug output
./syshash.exe -unhook -debug

## or any combination of the flags :3

demo

basic execution

# run shellcode injection test
./syshash.exe

# enable debug output
./syshash.exe -debug

# dump ntdll functions to files
./syshash.exe -dump

## or any combination of the flags :3