Super Nanny Injector v2 (+ Manual Map!)

octpos · 2015-10-07T02:01:06.000Z

Super Nanny Injector!! http://i.imgur.com/iVQ17Ml.png After having problem with an user trying to inject my cheat to Heroes and Generals, I decided to make an injector(x86<>x86) that points every single error made, and give the respective GetLastError() codes! As I made it for an easily troubleshooting, it copies every string error to clipboard, so one can just paste the error to get help :} . Now with the second release (http://www.mpgh.net/forum/showthread.php?p=11009533) of my injector, I added GUI(Qt5) and other 2 injection methods. CreateRemoteThread: WinAPI method to run a library(yours ;)) at remote process. This method uses LoadLibrary, so the process can be aware of it, as your DLL will be listed on process modules. NtCreateThreadEx : Works equally as the last injection, but it's a sycall :}. It may works on situations where CreateRemote fails (as executing remote thread across session boundaries). Manual Map: Inject the DLL directly, resolving imports and all without the using of LoadLibrary, so the process can't get the module handler of DLL (it can scan for P.E header though) . I used part of code from malarkey and all section handling from Pietrek, porting everything to GCC (no declspec(naked) :o) http://i.imgur.com/e9FINyj.jpg How to Use: 1. Open injector. 2. Insert process exe name. 3. Insert DLL name, or open it trough file navigation. 4. Chose inject method. 5. Inject :} http://i.imgur.com/xIRScJH.jpg Success: You will hear a short beep, it's the successfully injected sound Trouble: You will hear a long beep, the error will be displayed on screen for 5 secs(most errors doesn't close the injector). Troubleshooting? 1. Just paste error string. It will be on your clipboard!!! http://i.imgur.com/uRIMJ92.jpg Never forget to run as Admin again! The shield is your friend!bobo http://i.imgur.com/p0w7mfK.jpg P.S: I mostly rewrote every address mapping functions from Manual Map to works on GCC. I tested to exhaustion my functions and it appears to works but on forwarded functions :(. The big deal is that the injection works, but the mapped remote thread will not have all imports fixed. That means no error throw at injection, and remote thread falling to works :o . When I have time enough, I try to fix it :D Virus scans: https://virusscan.jotti.org/en-US/filescanjob/3z3lamdqfm https://www.virustotal.com/file/d4c4a0360401c35eadec3a91013a5eae2dd9e9dd9565e53b99ed055a5cbd1df1/analysis/1444182845/ 297848 Sorry for the huge file... it's Qt5 fault :rolleyes:

Super Nanny Injector!!

After having problem with an user trying to inject my cheat to Heroes and Generals, I decided to make an injector(x86<>x86) that points every single error made, and give the respective GetLastError() codes! As I made it for an easily troubleshooting, it copies every string error to clipboard, so one can just paste the error to get help :} .

Now with the second release of my injector, I added GUI(Qt5) and other 2 injection methods.

CreateRemoteThread: WinAPI method to run a library(yours ) at remote process. This method uses LoadLibrary, so the process can be aware of it, as your DLL will be listed on process modules.
NtCreateThreadEx : Works equally as the last injection, but it's a sycall :}. It may works on situations where CreateRemote fails (as executing remote thread across session boundaries).
Manual Map: Inject the DLL directly, resolving imports and all without the using of LoadLibrary, so the process can't get the module handler of DLL (it can scan for P.E header though) . I used part of code from malarkey and all section handling from Pietrek, porting everything to GCC (no declspec(naked) )

How to Use:

1. Open injector.
2. Insert process exe name.
3. Insert DLL name, or open it trough file navigation.
4. Chose inject method.
5. Inject :}

Success: You will hear a short beep, it's the successfully injected sound
Trouble: You will hear a long beep, the error will be displayed on screen for 5 secs(most errors doesn't close the injector).

Troubleshooting?
1. Just paste error string. It will be on your clipboard!!!

Never forget to run as Admin again! The shield is your friend!

P.S: I mostly rewrote every address mapping functions from Manual Map to works on GCC. I tested to exhaustion my functions and it appears to works but on forwarded functions

. The big deal is that the injection works, but the mapped remote thread will not have all imports fixed. That means no error throw at injection, and remote thread falling to works

. When I have time enough, I try to fix it