Questions tagged [dll-injection]

DLL injection is a technique used to run code within the address space of another process by forcing it to load a dynamic-link library(DLL).

DLL injection is often used by external programs to influence the behaviour of another program in a way its authors did not anticipate or intend. For example, the injected code could hook system function calls, or read the contents of password text-boxes, which cannot be done the usual way. A program used to inject arbitrary code into arbitrary processes is called a DLL injector.

468 questions
-1
votes
1 answer

how can we Hijack DLL to lock all directories in windows to verify

I mean when we double click a directory,in requests us to verify.I think it can be done by dll-injection.Hope can give some ideas or tutorial.Thanks
Piko
  • 3
  • 2
-1
votes
1 answer

Debugging in memory components using Visual Studio

I'm using the infamous Blackbone library to map / inject another module into a different process and execute its code. Usually to debug the injected module, i have to attach windbg's debugger to the hijacked process, scan loaded modules using…
igal k
  • 1,883
  • 2
  • 28
  • 57
-1
votes
2 answers

my dll injection . succeed when compiled as 32 bit , but failed when compiled as 64 bit

My OS is Windows 8.1 64 bit . My program is to inject a DLL file to a target process,and when this DLL file attached to a process , it will create a .txt file on D: and write some words into it and save .It is just a test.But when I compile my…
freedom3
  • 1
  • 1
-1
votes
1 answer

Decompile file .dll

dll file and I wanna see the source code but I always not success to see that. I already try with ILSpy, .Net Reflector but not success this link my .dll file I hope someone can help me
-1
votes
1 answer

Do injected process' stay true to locks that are created via the injected DLL/code?

I've created a DLL that injects into a piece of software, the purpose of this DLL is to encrypt some data during run time that shouldn't be accessible by others. Anyways, we've run into an issue where the encryption/decryption process messes up…
Ricky
  • 343
  • 1
  • 2
  • 11
-1
votes
2 answers

C++ Winapi resize remote window without restriction

Im trying to resize an external process' window smaller than its minimum size constraint. What I tried to do was to inject a .dll and overwrite the WM_GETMINMAXINFO message, setting the ptMinTrackSize to {0,0}. However this doesn't seem to…
proGrammar
  • 39
  • 1
  • 6
-1
votes
1 answer

Delphi - Get Msg type of button on another process

How i can know what is the Msg type of a button on another process e.g. WM_COMMAND My goal is I want to click that button even if its disabled. I know i can simply enable the targeted button using EnableWindow then using PostMessage(hButton,…
RepeatUntil
  • 2,272
  • 4
  • 32
  • 57
-1
votes
1 answer

Injected DLL does nothing

I attempted to inject a C++ DLL in another WIN32 console programme. The injector (winjet) shows that it is successfully injected but the DLL itself does nothing. As compiler I use Visual Studio 2013 and I just found out if I use precompiled header…
Jonas Aisch
  • 71
  • 10
-1
votes
2 answers

Injected DLL not correct HMODULE

So I am injecting a DLL into a program. I can verify that the DLL is injected with help from Process Explorer. After the injection I am looping all modules from the process, comparing the names and return the injected dll as a HMODULE. Then I…
user616396
  • 35
  • 8
-1
votes
1 answer

Injecting a re-compiled dll into a running windows servise

My service takes ~20min to reboot, it obviously consists of a large number of libraries. Testing even a minor enhancement/bugfix is extremely inconvenient. How can I substitute a loaded dll with the "same" one, only rebuilt, without shutting down…
user3209815
  • 357
  • 1
  • 11
  • 25
-1
votes
1 answer

Following Structures In Memory Using C and Cpp

I have a lot of structures inside a header file. I'm trying to think of a way to consolidate them. I know there has to be a better way to access these pointers. I used a program called reclass; what it does is create structures based off pointers…
-2
votes
1 answer

What's the alternative of __declspec (naked)?

I'm learning dll injection these days. There is my code: __declspec(naked) void codecave() { __asm { pushad mov dword ptr ds : [ebx + 4] , 0xD popad mov dword ptr ds : [0x102AE98] , ebx jmp ret_address …
LisnX
  • 1
-2
votes
2 answers

is there a way to add process_query_information to existing process handle?

i'm absolute beginner to this, i've been trying to collect handle on my system using ntquerysysteminformation and now i get the handle that i want(i know this by using processhacker) but the problem coming when i try to collect the pid from that…
-2
votes
2 answers

How do I get any process's network traffic from memory?

I want to dump network traffic from any application in Windows. But I don't want to use any proxy or listen to socket. I just want to read it from memory. I could do it with Strace in linux. Can you suggest a solution for Windows? As a result of my…
Kanber
  • 1
  • 1
-2
votes
2 answers

When I inject the DLL into an existing process, DLLMain doesn't do anything

So I'm trying to make a game cheat (for learning purposes) and I'm using Counter Strike Global Offensive as the Target and I'm using -insecure launch option which doesn't allow me to go to any secure servers and thus I can only use the cheat in…
xXTurner
  • 61
  • 9