Summary
In this chapter, we learned about the relocation design of PE modules. By way of example, we learned how to analyze and use the relocation table of the PE structure and implement the relocation design for dynamic PE modules. This relocation technique allows us to mount an EXE or DLL In any memory space we want with our own application loader.
In the next chapter, we will use all the knowledge we have learned so far to introduce how to write a lightweight application loader in x86 that can be used to convert any DLL module into shellcode. This classic technique has been widely used in the wild and in commercial attack suites, such as Metasploit and Cobalt Strike.
