diff options
| author | clymb3r <bialek.joseph@gmail.com> | 2013-10-01 09:47:05 -0700 |
|---|---|---|
| committer | clymb3r <bialek.joseph@gmail.com> | 2013-10-01 09:47:05 -0700 |
| commit | 59cd18360764af6e6133ad11ec9cd8295372e587 (patch) | |
| tree | 758a4f12cd6d2bddb0006df7d1fcac3736b61b8f /Exfiltration/mimikatz-1.0/driver/notify_reg.h | |
| parent | b17272eb98933c62baa5a21bcd23713f9182ee38 (diff) | |
| download | PowerSploit-59cd18360764af6e6133ad11ec9cd8295372e587.tar.gz PowerSploit-59cd18360764af6e6133ad11ec9cd8295372e587.zip | |
Adding Invoke-Mimikatz and Invoke-Ninjacopy
Diffstat (limited to 'Exfiltration/mimikatz-1.0/driver/notify_reg.h')
| -rw-r--r-- | Exfiltration/mimikatz-1.0/driver/notify_reg.h | 17 |
1 files changed, 17 insertions, 0 deletions
diff --git a/Exfiltration/mimikatz-1.0/driver/notify_reg.h b/Exfiltration/mimikatz-1.0/driver/notify_reg.h new file mode 100644 index 0000000..ce86568 --- /dev/null +++ b/Exfiltration/mimikatz-1.0/driver/notify_reg.h @@ -0,0 +1,17 @@ +#pragma once +#include "notify.h" + +ULONG * CmpCallBackCount; +PVOID * CmpCallBackVector; +PLIST_ENTRY CallbackListHead; + +typedef struct _KIWI_REGISTRY6_CALLBACK +{ + LARGE_INTEGER cookie; + PVOID context; + PVOID callback; + UNICODE_STRING altitude; +} KIWI_REGISTRY6_CALLBACK, *PKIWI_REGISTRY6_CALLBACK; + +NTSTATUS getNotifyRegistryRoutine(); +NTSTATUS kListNotifyRegistry(LPWSTR pszDest, size_t cbDest, LPWSTR *ppszDestEnd, size_t *pcbRemaining); |