CreateThreadpoolWork

Shellcode Loader

Abusing callback to run shellcode.

Overview

Eksekusi shellcode dengan CreateThreadpoolWork, SubmitThreadpoolWork, dan WaitForThreadpoolWorkCallbacks.

PTP_WORK CreateThreadpoolWork(PTP_WORK_CALLBACK pfnwk, PVOID pv, PTP_CALLBACK_ENVIRON pcbe);

void SubmitThreadpoolWork(PTP_WORK pwk);

void WaitForThreadpoolWorkCallbacks(PTP_WORK pwk, BOOL fCancelPendingCallbacks);

Reference

• MSDN CreateThreadpoolWork
• MSDN SubmitThreadpoolWork
• MSDN WaitForThreadpoolWorkCallbacks