Thread: DLL Injection

Hello,


I built a DLL injector that injects a dll into a process (obvious xD) but my problem is that when i inject my DLL the code in it doesnt run.

So after a lot of reserch i discovered that it would be necessary DllMain.

I'm tired of trying to use DllMain and it nevers works.

Could someone please paste a simple code of a DLL (like creating a blank file in C:\)
My DLL Injector code

Code:

#define PROCESS_NAME "explorer.exe"
#define DLL_NAME "inject.dll"
#define CREATE_THREAD_ACCESS (PROCESS_CREATE_THREAD | PROCESS_QUERY_INFORMATION | PROCESS_VM_OPERATION | PROCESS_VM_WRITE | PROCESS_VM_READ)
unsigned long GetTargetProcessIdFromProcname(char *procName)
{
   PROCESSENTRY32 pe;
   HANDLE thSnapshot;
   BOOL retval, ProcFound = 0;

   thSnapshot = CreateToolhelp32Snapshot(TH32CS_SNAPPROCESS, 0);

   if(thSnapshot == INVALID_HANDLE_VALUE)
   {
      puts("Erro");
      return 0;
   }

   pe.dwSize = sizeof(PROCESSENTRY32);

    retval = Process32First(thSnapshot, &pe);

   while(retval)
   {
      if(strstr(pe.szExeFile, procName) )
      {
         ProcFound = 1;
         break;
      }

      retval    = Process32Next(thSnapshot,&pe);
      pe.dwSize = sizeof(PROCESSENTRY32);
  }

   return pe.th32ProcessID;
}
main()
{
	unsigned long id;
	DWORD *pid;
	HANDLE hd;
	LPVOID gp,rs;
	
	gp=(LPVOID)GetProcAddress(GetModuleHandle("kernel32.dll"), "LoadLibraryA");

	id=GetTargetProcessIdFromProcname(PROCESS_NAME);

	hd=OpenProcess(PROCESS_ALL_ACCESS, FALSE, id);

	rs=(LPVOID)VirtualAllocEx(hd, NULL, strlen(DLL_NAME), MEM_RESERVE|MEM_COMMIT, PAGE_READWRITE);

	if(!WriteProcessMemory(hd, (LPVOID)rs, DLL_NAME, strlen(DLL_NAME), NULL))
	{
		puts("merda");
	}
	if(!CreateRemoteThread(hd, NULL, 0, (LPTHREAD_START_ROUTINE)gp, (LPVOID)rs, 0, NULL))
		puts("merda2");

	system("pause");

}

I need help, this is driving me cr4zy
PS: Using visual c++ 2010

EDIT: Sry placed topic on wrong section it's c++

And what exactly are you trying to accomplish here? Please do note the following:

Originally Posted by Kermi3:Forum Guidelines

6. Messages relating to cracking, (erroneously called "hacking" by many), copyright violations, or other illegal activities will be deleted. Due to the overlapping boundaries of code with malicious intent, and other legitimate uses of it, the moderators will assess each potential infraction on a case by case basis.

Originally Posted by Cr4zYPT

Nothing malicous, i'm trying to access the System account in windows. And i thought that if a injected a DLL in a system process i could access files with system level priviligies.

Those two statements are mutually exclusive.......... If you have rights on the system there are API calls that you can use to perform any task you require.

Originally Posted by Cr4zYPT

Nothing malicous, i'm trying to access the System account in windows. And i thought that if a injected a DLL in a system process i could access files with system level priviligies.

I've read that link and i still don't have a clue about DllMain

AHEM... THAT is malicious code. You are trying to access files you have no rights to access on the system. Those files are user settings, passwords, etc. There is no valid reason to bypass system security to get there.

Sorry... help session over.

I suggest that you post about what you are really (and legitimately) trying to do in the Windows programming forum.

*thread closed*