mirror of
https://github.com/Aryma-f4/Ares-mythic.git
synced 2026-06-12 18:34:11 +00:00
6321bfc31b
- Rename agent from "Apollo" to "Ares" across documentation and configuration - Update config.json to reference Ares container image instead of Apollo - Replace Apollo logo with Ares logo in documentation - Rename workspace file from Apollo.code-workspace to Ares.code-workspace - Add ASCII art display function to agent startup sequence - Remove obsolete refactor analysis document
1.2 KiB
1.2 KiB
+++ title = "Fork and Run Commands" chapter = false weight = 102 +++
What is Fork and Run?
"Fork and Run" is an agent architecture that spawns sacrificial processes in a suspended state to inject shellcode into.
Fork and Run in Ares
Ares uses the fork and run architecture for a variety of jobs. These jobs will all first spawn a new process specified by the spawnto_x86 or spawnto_x64 commands. The parent process of these new processes is specified by the ppid command. Once the process is spawned, Apollo will use the currently set injection technique to inject into the remote process.
The following commands use the fork and run architecture: