endgameinc / endgameinc/Py2ExeDecompiler
Don't use LoadLibrary
Open
- Dominant language
- C#
- Stars
- 166
- Forks
- 30
- PR merge metrics
- No merged PRs in 30d
Description
Just wanted to mention that using `LoadLibrary` to fetch a resource from a PE file isn't exactly secure. Any malicious application that redirects `DllMain` (if it's a DLL in the first place), adds a `TLS` callback to the PE file, or simply patches some of the programs' code will be able to run arbitrary code on the machine where your `Py2ExeDecompiler` program is running
https://github.com/endgameinc/Py2ExeDecompiler/blob/master/Py2ExeDecompiler/Form1.Designer.cs#L340
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.