Stack Overflow
Stack Overflow

Questions tagged [createremotethread]

45 questions
1
vote
2 answers

Remote thread is failing on call to LoadLibrary with error 87

I am tring to create a Remote thread that will load a DLL I wrote, and run a function from it. The DLL is working fine (Checked) but from some reason, the Remote thread fails and the proccess in which it was created stop responding. I used…
Roi Ronn
  • 55
  • 1
  • 8
1
vote
0 answers

How to load a DLL on disk into remote process via Golang?

I am new to programming and have decided to pickup Golang. One project I am working on is injecting a DLL on disk into a remote process via CreateRemoteThread. The intent of the program is to have it spawn a sacrificial process, notepad.exe, and…
pittsec
  • 23
  • 3
1
vote
2 answers

Intercept LoadLibrary calls by current process after DLL injection

After injecting my DLL into a process via CreateRemoteThread, I would like to know how this DLL could intercept any calls to LoadLibraryA/W that are made by the injected process. I saw the library Detour however it does not seem appropriate as I…
Dlionis
  • 100
  • 1
  • 6
1
vote
2 answers

How to fix "LPVOID: unknown size" error while using the CreateRemoteThread API?

I am trying create a tool for performing DLL-Injection by writing the the DLL in the Memory of a running process using VirtualAclloc() API and then finding the offset of the entrypoint and passing it to the CreateRemoteThread() API by adding the…
d3xt3r
  • 21
  • 4
1
vote
1 answer

Why does injecting code caves with thread injection crash my target win32 EXE?

I am currently trying to inject a code cave with thread injection to a remote win32 EXE running on my win7 (x64) system. To achieve this, I am using Microsoft VB6, through which I do the following: OpenProcess, to get a handle to the remote process…
Mike
  • 11
  • 2
1
vote
1 answer

DLL code injection with remote Thread: Where to store DLL filename/location in target process address space?

there might be no (useful) answere to this Questions, but whatever. I want to inject code into an application via DLL code injection. The plan is: Find the address of the LoadLibrary function in the target process. Write a string with the…
lulle2007200
  • 888
  • 9
  • 20
1
vote
1 answer

C++ : Dll injection. Why CreateRemoteThread() fail on Notepad?

I'm pretty new to DLL injection, doing this by curiosty and because I want to create an overlay in a game, without modifying his source code. But for now, I'm stuck with a basic DLL injection : the one using CreateRemoteThread(). I followed this…
Greg
  • 579
  • 5
  • 26
1
vote
0 answers

Issues with injection code

So after looking around online, and debugging the code I found out that there are issues with using CreateRemoteThread and CreateRemoteThreadEx on windows 8, 8.1, and 10 (The dll does not inject at all). The code works fine for anyone who is not…
Kendrick Lamar
  • 781
  • 2
  • 8
  • 18
1
vote
1 answer

Running DllImport commands from CreateRemoteThread

I have a function named Msg that's imported from a dll named tier0.dll. I can DllImport this just fine, but the command only works when the dll is attached to another process which can complete the Msg command. Using CreateRemoteThread, it is…
Gbps
  • 857
  • 2
  • 14
  • 29
1
vote
1 answer

Calling SetDllDirectory from another process doesn't work?

I've been trying to make a way to switch the Dll directory of a program I don't own, from an "injector" program which is suppose to switch the Dll loading directory to load the modified or tapped Dlls. Here's the function: void AddDirectory(HANDLE…
user1591117
  • 287
  • 2
  • 5
  • 13
1
vote
2 answers

How does CreateRemoteThread work behind the scenes?

What does CreateRemoteThread do to actually create the remote thread?
user37875
  • 13,904
  • 9
  • 37
  • 43
1
vote
1 answer

CreateRemoteThread says file doesn't exist, but it DOES exist

I am trying to inject a .dll into another process's memory, by using Interop. This is my C# code: class Program { static void Main(string[] args) { var result = Inject(Process.GetProcessesByName("notepad")[0].Id); …
Bruno Klein
  • 3,217
  • 5
  • 29
  • 39
1
vote
1 answer

Stop or Detection dll injection loadlibrary

I want to detect dll injector.below code work as dll injector.I need Your help in c# source code which help me to detect then i will close my application.i search in google.com a lots but tired to get solution.please help and give me source code in…
user1159258
  • 81
  • 2
  • 10
1
vote
1 answer

CreateRemoteThread() not acting as expected

I'm reading through the book Gray Hat Python and am having trouble with with aforementioned injection techniques. The DLL injection code works successfully, but the code in the dll does not appear to execute, and does not create a messagebox. The…
SteveC
  • 398
  • 1
  • 5
  • 11
0
votes
1 answer

Execute remote function with memory address as parameter

I'm trying to execute a function in a running (old) Win32 Borland application (Window has class OLW_WINDOW). By using OllyDbg I've found out that the function has one parameter which is a memory address. One variable/value used by the function is…
Oyvind E
  • 41
  • 2
1
2
3