Hack Forums
[C] Methods of code injection and places/books to learn about them - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Tech (https://hackforums.net/forumdisplay.php?fid=444)
+--- Forum: Coding (https://hackforums.net/forumdisplay.php?fid=151)
+---- Forum: Software Development (https://hackforums.net/forumdisplay.php?fid=118)
+---- Thread: [C] Methods of code injection and places/books to learn about them (/showthread.php?tid=5896523)



Methods of code injection and places/books to learn about them - hansbald - Oct 18, 2018

Hello,
I am currently in university learning netsec and advanced cryptography as part of my CS.
I know of a few code injection methods:
Process Hollowing (runPE)
Process Doppelganging
Atombombing

Now, I want to REALLY understand them. I dont want to copy some RunPE code and alter it slightly, I want to really learn how these things work.
Is there a place or book you can recommend that explains everything about how Windows handles executables, what every part of the PE Header does etc etc

I find this really interesting and want to learn more


RE: Methods of code injection and places/books to learn about them - HFDone - Oct 18, 2018

https://en.wikipedia.org/wiki/Portable_Executable
https://docs.microsoft.com/en-us/windows/desktop/debug/pe-format
"I dont want to copy some RunPE code and alter it slightly, I want to really learn how these things work."
copy some RunPE code and learn how these things work.
use ide break points ...