[DragQueen]

Uhm, Why is everyone pissed about this being "leaked/released"? I guarantee you NO skids will be able to C+P this, considering they don't even know what it does, let alone how to implement it.

there is some that understand what it does :P
it took me some hour's to fully understand what it does.
and i think its good enough.

[HOLY COW MAN]

🤦‍♂

Haha , Funny Greek Expression, You just can't implement Greek expression Into English one!
🤣🤣🤣🤣🤣

Uhm what? Let alone may be a Greek expression, however, it's still an English expression, so I don't see how I can't use it.

@OP

Implementing it is different than understanding how it works though.

[Gh0st-Zer0]

Uhm what? Let alone may be a Greek expression, however, it's still an English expression, so I don't see how I can't use it.

@OP

Implementing it is different than understanding how it works though.

Yes, what i was thinking??? Sorry my mistake Pal! :D

[HOLY COW MAN]

@OP

I'm not 100% sure, but doesn't PEB Patching patch the File's "Current Directory" when injected into an executable? Or is this a RunPE type deal?

[Gh0st-Zer0]

@OP

I'm not 100% sure, but doesn't PEB Patching patch the File's "Current Directory" when injected into an executable? Or is this a RunPE type deal?

What you said is one of the uses of PEB Patching, you can do a lot of things also!

[MoonWalker]

Very useful snippet. Thanks a lot for sharing this.

[Ph03.nix]

Thank you very much for this AWESOME share!

I've tried already to translate it form c++ myself but I failed.
So thank you very much for it 👍

[DragonHunter]

When I'm looking at the C++ source I'm just lolling did not look at the C# version yet tho but you can access for C# and C++ the memory using pointers
No need to call any api to access PEB btw

The structs/APIs are already defined so no need to put them there again in C++
And never use this, PROCESS_ALL_ACCESS

Oh well none the less good work ^_^ (if u coded it)

[DragQueen]

When I'm looking at the C++ source I'm just lolling did not look at the C# version yet tho but you can access for C# and C++ the memory using pointers
No need to call any api to access PEB btw

The structs/APIs are already defined so no need to put them there again in C++
And never use this, PROCESS_ALL_ACCESS

Oh well none the less good work ^_^ (if u coded it)

i didnt code it :P
just translated it

[Xori]

When I'm looking at the C++ source I'm just lolling did not look at the C# version yet tho but you can access for C# and C++ the memory using pointers
No need to call any api to access PEB btw

The structs/APIs are already defined so no need to put them there again in C++
And never use this, PROCESS_ALL_ACCESS

Oh well none the less good work ^_^ (if u coded it)

It's coded by RTFLOL and it's been around for a while, from what I understand most of the s00par crypters out there that allow you to use server startup use this one...

People shouldn't rage over it being reposted or "releasing" now though,

// Coded by RTFLOL
// Released on https://hackforums.net/
// Date: 2/1/2010