Questions tagged [dll-injection]
DLL Injection is a method of code injection in a Microsoft Windows environment.
41
questions
0
votes
1answer
31 views
Can't find injected DLL in OllyDbg
I am trying to learn about injecting a DLL into a process and I wanted to simply execute a code which injects an already built DLL so that I could then check with OllyDbg if it worked.
I am using the ...
0
votes
1answer
72 views
Function Hooking via Dll Injection Negative Offset
I have some code that hooks a function via dll injection. The code works fine but i'm a little perplexed as to how it works. The code needs to calculate the offset from the function that i'm going to ...
0
votes
1answer
84 views
Writing a DLL in C# vs C++? [closed]
I am trying to make a client-sided anticheat which would work similar to BattlEye or GameGuard. In order to do this, I want to create a DLL which would do the cheat verification, which then I would ...
0
votes
0answers
74 views
injecting through APC using LdrLoadDll fails on `CiValidateImageHeader`
I've encountered an image validation error while trying to inject dll from
driver which add apc task to be performed by alertable thread. the function task include calling to LdrLoadDll with the ...
1
vote
1answer
76 views
DLL Injection Call Address In Target
I have an address that is located in a dll loaded by my target process. I would like to call this address using dll injection.
For now my dll looks like this:
BOOL APIENTRY DllMain(HMODULE hModule, ...
5
votes
1answer
271 views
Microsoft Edge and it's related processes may have turned protected in windows 10 1903
It seems like driver based injection using APC calls fails on MicrosoftEdge and it's related processes (browser_broker.exe , MicrosoftEdgeCP.exe and MicrosoftEdge.exe).
Looking into the problem, it ...
1
vote
1answer
107 views
Is it possible to hijack a C++ DLL after it has been loaded into the memory space? How?
I have a .Net application, in which a C++ DLL is embedded as a resource into the application.
When the .Net application is running, I will extract the C++ DLL to a temporary folder, and after that, ...
1
vote
2answers
202 views
Permanently load a DLL to an executable
With the help of IDA I was able to hard-code changes into an executable by simply replacing some bytes with a hex editor, what I did was to change the resolution to something larger.
I've learnt that ...
1
vote
0answers
86 views
Detouring with Unreal Engine 4, importing exe functions
I'm not sure that this is the right SO community to be asking this in, but I thought I'd give it a try. Some friends and I have successfully detoured a game built with UE4 by loading a modified ...
1
vote
0answers
105 views
Finding lua C functions compiled binary
So i am trying to "hack" a game however not for cheating purposes. I am looking to extend the games scripting functionality through a DLL that can look for processes and return them. The game I am ...
59
votes
2answers
35k views
What is DLL Injection and how is it used for reversing?
I was reading a discussion about dumping a processes part of a process's memory and someone suggested using DLL injection to do this. I'll be honest in that I don't really understand. How does DLL ...
0
votes
1answer
499 views
Calling internal functions via dll injection - runtime error
I am trying to modify closed source game client that works with my game server. The purpose of that is being able to add new graphical elements into the client.
I have read a lot of tutorials about ...
15
votes
4answers
35k views
How can DLL injection be detected?
In this question on DLL injection multiple answers mention that DLL injection can be used to modify games, perhaps for the purposes of writing a bot. It seems desirable to be able to detect DLL ...
1
vote
1answer
542 views
DLL Injection does not work twice
I created a program that performs DLL injection. It does that by opening the process with OpenProcess, writes the DLL path to the process and creates a remote thread with CreateRemoteThread with the ...
0
votes
3answers
848 views
In Memory DLL Injection
I am currently working on learning how different types of DLL injection can be performed. Right now I am able to run a function by:
Opening the remote process;
Allocating memory in remote process;
...
0
votes
1answer
462 views
It's possible call a function outside a original thread?
Example:
I have a function in a process on the memory address: 0xABCDEF, but that function cannot be called outside of original thread, it's possible to call it or hook it somehow?
To what i'm going ...
4
votes
1answer
2k views
Hacking Lua - Introduce new functions into built Lua
I am trying to hack a game (not for cheating though) by introducing new built-in methods and functions in order to communicate with the game using sockets. Here is a small "pseudo code" example of ...
1
vote
1answer
459 views
Unable to call function with CreateRemoteThread
I am messing around with some dll injection/code injection. Therefore I made a little program which does nothing, but it has a function in it, which never get called and I wrote another program which ...
2
votes
2answers
419 views
Simulate Windows menu item activation
I am trying to shortcut the call to a procedure that is activated when clicking on a menu item.
I injected a DLL on the process that creates this window with the menu bar.
I used Spy++ from ...
1
vote
1answer
302 views
What is the quickest way to run code of my own DLL?
Not sure if the title is that telling but what I want to do is hack into an executable and do as little as necessary to get the code from my DLL running since I want to write as few lines of assembly ...
0
votes
1answer
135 views
Possible to hook an address and directly write to it?
I am reversing a game for fun and currently use this function to manipulate the Y coordinate:
void __declspec(naked) hookYCoordASM() {
__asm {
mov eax, valueY
mov [esi + 0x7C], ...
0
votes
1answer
857 views
Reverse Engineering Exported DLL Function
I am trying to read the arguments sent to an external dll file "FlashToolLib.dll". My hook function is never triggered, I am guessing because I have the address wrong. I have tried the address in ...
0
votes
1answer
1k views
Call function of injected dll
I am messing around with dll injections. I am able to inject a dll with an exported function into some process, but I have a question now:
Is there a standard way to call the exported function of my ...
1
vote
1answer
962 views
How to manipulate game which loads many dll's
I am messing around with a game made with CryEngine. It's a MMORPG, but I found out that I can manipulate the X/Y/Z coordinates of my character through cheat engine. And I also found out that I can ...
2
votes
1answer
87 views
What is an easy way to update the addresses of hooked functions in an exe
I have hooked into some functions in an exe. I was wondering if there were any simple ways to detect the memory addresses of these functions after the exe has a new build (not my exe). Is the best way ...
2
votes
1answer
148 views
Avoid program detecting a thread being used [closed]
I'm writing a DLL for a program that needs to run in an infinite loop (with delays, of course). For example:
while (true) {
std::cout << "I am running.\n";
Sleep(1000);
}
I'm not sure ...
2
votes
0answers
724 views
Dll Injection into QT application
I'm pretty new to this stuff, so please excuse me if anything I ask is kinda stupid.
I'm trying to inject a DLL into a QT application and call some of the QT functions. I got the injection working ...
1
vote
1answer
130 views
Return by Value/Call by Value internals
Good evening, fellow experts.
I'm fiddling around with something and right now I'm stuck.
I want to modify the behaviour of an application (Windows 7, 64bit).
Therefore, I inject a DLL into the ...
1
vote
0answers
60 views
Get DLL from EXE file [duplicate]
I am trying to reverse engineer an DLL that is loaded from a EXE.
I don't have the DLL file. I just have an executable file that injects the DLL into a certain process.
When I try using ollydbg or ...
1
vote
1answer
486 views
Call a thiscall method from an injected DLL [closed]
I am trying to create a (32-bit) DLL to inject into a target process.
My DLL should call a function inside the original process. So far nothing special, however the target function is using the ...
4
votes
1answer
2k views
Patching a string using DLL injection and OllyDbg
I'm a novice when it comes to RE but I'm trying to get into it. I have a background in C/C++ so doing the development side of things should be a breeze (aside from when assembly has to be used, im ...
1
vote
0answers
347 views
Resources for API Hooking and DLL Injection
What are great resources and essential skills needed to become a proficient reverse engineer regarding API Hooking and DLL Injection? I would like to use a comprehensive book instead of scattered ...
9
votes
1answer
23k views
How to debug the DLL of an EXE using IDA Pro?
I'm fairly new to the RE world, started right around a week and have gotten my hands dirty with some really good stuff on this website. Pardon my naive knowledge.
Currently, I'm trying to reverse a ...
2
votes
2answers
2k views
How to inject a DLL without being detected?
I understand that DLL injection can be used to modify games, perhaps for the purposes of writing a bot. Last time i injected a DLL, it was detected.
My injection method must have been detectable then, ...
2
votes
2answers
1k views
Extracting HTTPS packets before encryption
Say we have a Windows application, which sends some packets over HTTPS. We need to extract the content of this packets (unencrypted of course).
There is no way to get hands on server private ...
1
vote
1answer
706 views
Cannot call function (properly) in C++
I am developing a DLL for the purpose of injecting it into a running process for a game. I've found the memory addresses to some key functions(via Immunity Debugger) and I am trying to call those ...
5
votes
1answer
1k views
DLL Injection search for procedures/variables
I am learning DLL injection basics and different techniques to achieve it, like using CreateProcess and LoadLibrary for example, or simply replacing a .dll in folder where the application to inject ...
7
votes
0answers
763 views
Red Alert 2 Windows 8 DirectDraw compatibility
The game Red Alert 2 runs on Windows 8, but as soon as I inject a DLL (via ddraw.dll or an extra DLL) it stops drawing buttons on the main menu. With the DLL it still work fine in windowed mode and it ...
9
votes
1answer
4k views
Dll injection and GetProcAddress with the winapi
So i just read a little bit about how one would go about for injecting a dll into a running program on Wikipedia (the CreateRemoteThread idea). I followed the steps described and eventually got it ...
4
votes
1answer
6k views
API hooking using DLL injection with Python C-Types
I'd like to write something using Python C-Types that hooks API calls and can be leveraged for unpacking executables. Currently my (Python with C-Types) code launches an executable in a suspended ...
8
votes
3answers
4k views
Hook end/middle of function
How could I hook anywhere but the beginning of a function? I'm trying to add features to a third party executable, and I need it to execute it's code completely, then pass its data onto my function. I ...
