首页
社区
课程
招聘
[转帖]ManualMap by Darawk
发表于: 2008-6-28 02:03 5077

[转帖]ManualMap by Darawk

2008-6-28 02:03
5077
ManualMap by Darawk  

ManualMap is a library I wrote for dll injection by 'manually mapping' a PE file into the remote address space of a process. Instead of calling LoadLibrary or using SetWindowsHookEx (which also essentially calls LoadLibrary internally), this code parses the PE file itself, fixes up the relocs, maps the sections, and builds the import table. It also redirects APIs like GetModuleHandle and GetProcAddress so that manualmap'd modules are visible to each other, but are not visible to any other modules in the process.

[培训]科锐软件逆向54期预科班、正式班开始火爆招生报名啦!!!

上传的附件:
收藏
免费 1
支持
分享
最新回复 (1)
雪    币: 716
活跃值: (162)
能力值: ( LV9,RANK:250 )
在线值:
发帖
回帖
粉丝
2
标记一下,回去下载
2008-6-28 11:42
0
游客
登录 | 注册 方可回帖
返回