Oct 3, 2022 09:56 PM
(This post was last modified: Oct 8, 2022 11:04 PM by HiddenEyE.)
i will be posting codes, answering questions and teaching dll injection / code injection techniques from easy injection methods to sophisticated methods.
post questions or source codes while i answer them.
NB: am a c++ programmer but that doesn't mean i can't help in some areas.
things i will be expecting questions are:
DLL INJECTION / CODE INJECTION
1.using CreateRemoteThread / 1.using CreateRemoteThread
2.using RtlCreateUserThread / 2.using RtlCreateUserThread
3.using NtCreateThreadEx / 3.using NtCreateThreadEx
4.using QueueUserAPC / 4.using QueueUserAPC
5.using SetThreadContext / 5.using SetThreadContext
ETC.
if you need FUD method on this you have to pm me for it.
DLL to use:
#include <windows.h>
BOOL WINAPI DllMain(HINSTANCE hinstDLL,DWORD fdwReason,LPVOID lpvReserved)
{
switch (fdwReason) {
case DLL_PROCESS_ATTACH:
MessageBox(0, "Hello World from DLL!\n","Hi",MB_ICONINFORMATION);
break;
case DLL_PROCESS_DETACH:
break;
case DLL_THREAD_ATTACH:
break;
case DLL_THREAD_DETACH:
break;
}
return TRUE;
}
post questions or source codes while i answer them.
NB: am a c++ programmer but that doesn't mean i can't help in some areas.
things i will be expecting questions are:
DLL INJECTION / CODE INJECTION
1.using CreateRemoteThread / 1.using CreateRemoteThread
2.using RtlCreateUserThread / 2.using RtlCreateUserThread
3.using NtCreateThreadEx / 3.using NtCreateThreadEx
4.using QueueUserAPC / 4.using QueueUserAPC
5.using SetThreadContext / 5.using SetThreadContext
ETC.
if you need FUD method on this you have to pm me for it.
DLL to use:
#include <windows.h>
BOOL WINAPI DllMain(HINSTANCE hinstDLL,DWORD fdwReason,LPVOID lpvReserved)
{
switch (fdwReason) {
case DLL_PROCESS_ATTACH:
MessageBox(0, "Hello World from DLL!\n","Hi",MB_ICONINFORMATION);
break;
case DLL_PROCESS_DETACH:
break;
case DLL_THREAD_ATTACH:
break;
case DLL_THREAD_DETACH:
break;
}
return TRUE;
}
#c/c++# & #asm#
The way to patch bad code is to remove the bad code, not to add new bad code that hides the old bad code

