blog

枪手亨利

博客园 首页 新随笔 联系 订阅 管理

20051026
Remote code injection has always been a popular topic with dozens of articles written about the subject. One of the preferred techniques involves the following steps :

  1. Allocate memory in the remote process using VirtualAllocEx().
  2. Copy the code to the allocated remote memory using WriteProcessMemory().
  3. Execute the remote code using CreateRemoteThread().

The problem of this technique (as stated by several remote injection tutorials) is that the needed Windows functions don't exist across all Windows versions. The purpose of this library is to emulate the missing functions to allow to use the same code across all Windows versions.

posted on 2005-10-26 16:51  henry  阅读(572)  评论(0)    收藏  举报