Exetools  

Go Back   Exetools > General > Source Code

Notices

 
 
Thread Tools Display Modes
Prev Previous Post   Next Post Next
  #3  
Old 06-06-2020, 04:41
DavidXanatos DavidXanatos is offline
Family
 
Join Date: Jun 2018
Posts: 183
Rept. Given: 3
Rept. Rcvd 47 Times in 33 Posts
Thanks Given: 59
Thanks Rcvd at 363 Times in 120 Posts
DavidXanatos Reputation: 47
No .NET yet...

But I have reworked the Injector: https://github.com/DavidXanatos/HideTS/tree/master/Injector
It now injects without using create remote thread by hijacking the main thread, and it has an option to disable the parelell dll loading introduced with a recent win 10 edition.

Also the injector doesn't longer need to be the same bit'ness as the target process and dll, well if its 64 bit it can do booth, it its 32 bit it can only do 32, so well its half universal LOL.
Reply With Quote
The Following 6 Users Say Thank You to DavidXanatos For This Useful Post:
Abaddon (06-07-2020), deepzero (06-06-2020), Doit (06-10-2020), niculaita (06-07-2020), tonyweb (06-07-2020), user1 (06-06-2020)
 


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is On


Similar Threads
Thread Thread Starter Forum Replies Last Post
Malware Sample analysis Aesculapius Source Code 2 02-13-2018 19:35
malevolous pdf sample Shub-Nigurrath General Discussion 3 02-08-2014 01:03


All times are GMT +8. The time now is 05:17.


Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX, chessgod101
( Since 1998 )