Comments (5)
you will have to manually map it, cause all the code are doing is it calls LoadLibraryA in the specified process with the dll path and then creates a thread in the specified process and it's start address are LoadLibraryA in order for the program to load it, you will have to emulate what LoadLibraryA do but you will just specify your dll bytes, and you will need to fix imports, do reallocation, call DllMain, etc... and it's hard to do that on a managed language.
from minerootkit.
sadly no, there's no winapi which loads dll based on it's bytes, if i had a free time i may implement manual mapping in the rootkit.
from minerootkit.
i see.. is there no other way around without using LoadLibraryA? (just so it can accept bytes without too many modifications)
from minerootkit.
i tried to find sources of loading dll as bytes , i came to this. that could work?
from minerootkit.
test it.
from minerootkit.
Related Issues (3)
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from minerootkit.