Questions tagged [code-injection]

Code injection is the general term for the result of a missing neutralization or improper neutralization of special elements of externally-influenced input, which could modify the syntax or behavior of the intended code.

Code injection is a type of consequence due to Improper Control of Generation of Code (CWE-94), which causes unauthorized code to be executed.

2439 questions
0
votes
1 answer

How to use EJB 3.1 remote interface in a multi-application deployment under JBoss 6?

I have the following set of Java EE 6 applications deployed under JBoss 6: a common JAR with an EJB remote interface 1st WAR-Application with the implementation of that EJB remote interface 2nd WAR-Application with a POJO using the EJB remote…
Alexander Rühl
  • 6,769
  • 9
  • 53
  • 96
0
votes
1 answer

VBA/SQL Parameterized Query - Unknown Column in Field List

I am working within VBA in Excel using a MySQL ODBC 5.1 Driver, and am having trouble with a parameterized SQL query that I'm trying to use to insert rows into a table. Before parameterization the query worked fine, but I ran into an issue with SQL…
0
votes
1 answer

Strange Hooking Problem : SendMessage unables to hooke the procedure while process launched normally , While it HOOKS properly in debugging mode

I am facing a strange problem regarding Hooking. I have a procedure which acts as a hooked procedure in C++/CLI, After SendMessage it unables to hook the procedure, while this is not the behavior while debugging the process in debug mode, when the…
Usman
  • 2,742
  • 4
  • 44
  • 82
0
votes
1 answer

DearPyGui in-game injection

How can i inject DearPYGui window in game? I stopped on this: https://i.stack.imgur.com/EY53r.jpg But i need it to work in game. Code that worked for this result: import os import subprocess import pymem from pymem import Pymem notepad =…
0
votes
1 answer

AppCertDLLs do not work in GUI apps, why?

I was trying to automatically inject a dll to every process (including GUI) whenever it is started by a user . My DLL hooks DoDragDrop method of winapi and communicates with server to decide allow or disallow the drag & drop process. I use easyhook…
Baris LaPaz
  • 97
  • 1
  • 9
0
votes
1 answer

Electron Remote Javascript injection problem

const BrowserWindow = remote.BrowserWindow; const IGWin = new BrowserWindow({ show: false, webPreferences: { plugins: true, allowDisplayingInsecureContent: true }, }); …
0
votes
1 answer

Does Mono.Cecil support full PDB format

I need to keep track of source code lines based on which certain instructions are to be injected. Steps I followed are as below: Built my project in debug mode which generated DLLs and corresponding PDBs(these were incremental PDBs and did not have…
0
votes
1 answer

Is it possible to inject with Cookie, Form, Session data?

I have a screen where I print all the variables to the screen and show them to the user with classic asp. On this screen, I show the values ​​of "Session","Querystring","Form","Cookie","Server.Variables" to the user. I'm doing replace so that some…
omerix
  • 149
  • 1
  • 12
0
votes
0 answers

How to fix OS command-line injection from C# process.start?

I am writing a console application , which accepts a command line argument and runs a bat file. I use process.start() for running a bat file. Example code snippet below static void Main(string[] args) { string Folder =…
0
votes
2 answers

Spring dependency injection - reflection / byte code instrumentation

When I want to use dependency injection with some non-default constructor, i.e. with parameters, spring must be using byte code instrumentation for that, right? Because AFAIK reflection only supports default constructor?
Sumedh
  • 335
  • 3
  • 13
0
votes
1 answer

Understanding DI in .NET Core/MVC

I need some help understanding the Dependency Injection. For instance, if i create a MVC projekt with a Person class and a PeopleController. In this case, will the PeopleController be using dependency injection, because the PeopleController class…
0
votes
1 answer

google chrome application code injection not working on certain elements

I've been messing around with packaged chrome applications today to see how much of a website one can manipulate with the code-injection feature. I've been using twitter.com/#!/login as my sandbox because it contains a pretty diverse array of…
0
votes
0 answers

How to prevent code injection to JS files in shared hosting?

I have a shared hosting that I use to upload front end projects only. My file manager has only HTML, CSS & JS files. I don't have any forms or receive anything from the user. But every few months, I get code injected to my JS files and it causes the…
Mohammed
  • 103
  • 11
0
votes
1 answer

Hacking exercise / How can I pass a new terminal command to an existing terminal command?

If we got this command line: python file.py --gsgds dsgsdg --dg dgdg --dg 'gdgd' And now, let's say we want to break this command and run another command while it is running, something like that: python file.py --gsgds dsgsdg --dg dgdg --dg '`sleep…
0
votes
1 answer

How can I sanitize user input into valid C-String literals?

I'm trying to use a shell script to generate C-code for wrapping executables. This needs to work on Linux and MacOS, and have as few dependencies as possible. I don't care about Windows (other than WSL2) #include #include int…
1 2 3
99
100