[QUESTION] Code injection
[QUESTION] Code injection
A while back I made a dll injector
Yesterday I opened this project again to see if I could improve it with things I have learnt the past 6 months
Looking at my code (and testing it) 2 questions came up:
1. Can I use commands other than: LoadLibrary and FreeLibrary ?
If I can, can someone provide me with an working example, I have not been able to call any other functions than the before mentioned (I tried some api's from user32.dll to, but those didn't work either)
I have seen a few examples of people that have been able to do it
The only problem is that the code was written in: C, and since FARPROC is defined differently in C++ I can't reproduce/test the code to learn from it
(also I can't find the page where the code is anymore, the only thing I know is that it came from: governmentsecurity.org)
2. Why can't I start a remote process in notepad??
While I was testing my improved injector I wasn't able to load a DLL inside notepad.exe, CreateRemoteThread returned 5 (access denied)
I was running in administrator mode so how can my access be denied?
-SCHiM
Yesterday I opened this project again to see if I could improve it with things I have learnt the past 6 months
Looking at my code (and testing it) 2 questions came up:
1. Can I use commands other than: LoadLibrary and FreeLibrary ?
If I can, can someone provide me with an working example, I have not been able to call any other functions than the before mentioned (I tried some api's from user32.dll to, but those didn't work either)
I have seen a few examples of people that have been able to do it
The only problem is that the code was written in: C, and since FARPROC is defined differently in C++ I can't reproduce/test the code to learn from it
(also I can't find the page where the code is anymore, the only thing I know is that it came from: governmentsecurity.org)
2. Why can't I start a remote process in notepad??
While I was testing my improved injector I wasn't able to load a DLL inside notepad.exe, CreateRemoteThread returned 5 (access denied)
I was running in administrator mode so how can my access be denied?
-SCHiM
Originally Posted by Hell_Demon
