Why does BDF offer payloads like 'iat_reverse_tcp_inline' and what is the purpose of 'cave_miner_inline'?
The `iat_reverse_tcp_inline` payload includes IAT repair logic to load necessary APIs (e.g., `LoadLibraryA`, `GetProcAddress`) if the target EXE's import table lacks them, ensuring the backdoor works. The `cave_miner_inline` is a minimal template (135 bytes) that only implements control flow jumps, serving as a basis for custom shellcode development. These payloads cover different scenarios when using the [Backdoor Factory](/news/implanting-backdoors-into-exe-files-using-bdf).
Related article:
Implanting backdoors into EXE files using BDF