endgameinc / endgameinc/Py2ExeDecompiler

Don't use LoadLibrary

Open
#1 1 comment 0 reactions 0 assignees View on GitHub
Dominant language
C#
Stars
166
Forks
30
PR merge metrics
No merged PRs in 30d

Description

Just wanted to mention that using `LoadLibrary` to fetch a resource from a PE file isn't exactly secure. Any malicious application that redirects `DllMain` (if it's a DLL in the first place), adds a `TLS` callback to the PE file, or simply patches some of the programs' code will be able to run arbitrary code on the machine where your `Py2ExeDecompiler` program is running

https://github.com/endgameinc/Py2ExeDecompiler/blob/master/Py2ExeDecompiler/Form1.Designer.cs#L340

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.