Chapter 7 Automated Framework Modification

ReFrameworker is a general-purpose tool for framework runtime modification. Besides manipulating the runtime, ReFrameworker can also be used to inject code, methods, and classes into the runtime and perform other tasks while generating modified binaries to replace the original binaries. Specifically, ReFrameworker allows researchers and attackers to quickly develop and deploy managed code rootkits into a given framework, test the behavior of injected code, return the managed code rootkits to their original state, and automate the process of generating modified ...

Get Managed Code Rootkits now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.