+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: Website code injection from external process (/showthread.php?tid=6277296)
Website code injection from external process - NetGoatFr - Aug 9, 2024
Hello! so i was wondering if y'all got any info on how I could inject like javascript code into a webpage from another process.
Like i could have process 1 than put into process 2 (the web browser) some magical thing and then process 1 can add custom html to the current web page
Or hell, even take full control of process 2 without the user noticing.
I know it's possible in windows using ddl injection, which would require me to make a dll (duh 🙄).
but I'd like a simpler way to do it (if possible).
i know that i could intercept and modify http response and requests but https is encrypted 😥
Any info is welcome 🙃
have a great day !
RE: Website code injection from external process - DramaKing - Aug 9, 2024
(Aug 9, 2024 07:04 AM)NetGoatFr Wrote: Hello! so i was wondering if y'all got any info on how I could inject like javascript code into a webpage from another process.
Like i could have process 1 than put into process 2 (the web browser) some magical thing and then process 1 can add custom html to the current web page
Or hell, even take full control of process 2 without the user noticing.
I know it's possible in windows using ddl injection, which would require me to make a dll (duh 🙄).
but I'd like a simpler way to do it (if possible).
i know that i could intercept and modify http response and requests but https is encrypted 😥
Any info is welcome 🙃
have a great day !
This would be magic. You would need the ability to map the web browser's memory, identify the part of the memory containing the webpage's HTML, and inject the JavaScript. Magic.
You would do better to set a proxy on the system that you control and add your Root CA to the certificate store or set the SSLKEYLOGFILE environment variable and capture the keys. Maybe.
RE: Website code injection from external process - SilentNuke - Aug 10, 2024
(Aug 9, 2024 07:04 AM)NetGoatFr Wrote: Hello! so i was wondering if y'all got any info on how I could inject like javascript code into a webpage from another process.
Like i could have process 1 than put into process 2 (the web browser) some magical thing and then process 1 can add custom html to the current web page
Or hell, even take full control of process 2 without the user noticing.
I know it's possible in windows using ddl injection, which would require me to make a dll (duh 🙄).
but I'd like a simpler way to do it (if possible).
i know that i could intercept and modify http response and requests but https is encrypted 😥
Any info is welcome 🙃
have a great day !
What is it you are trying to achieve exactly? Im sure there is a much simpler way of doing whatever it is you want to do lol.. this seems like a hell of a lot of work, effort and trial and error so this website must be very important or must hold very confidential information.