Skip to content

Rablidad/QueueUserAPC-DLLInjection-Main-Thread-Hijacking

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

31 Commits
 
 
 
 
 
 

Repository files navigation

SOURCE CODE

Source codes inside the src/ Directory.

Executable/DLL Files

Executables/DLLs Files inside the bin/ Directory.

How to run?

Run: WaitingHook.exe and then run Hooker.exe passing the correct parameters: >> Hooker.exe <process.exe> <C:\Path\To\DLLToBeInjected.dll>

How does it work?

It seeks for the desired process's thread, then gets its TID (Thread ID), open the thread's handle, open the process itself, inject the desired dll within and waits until the main process's thread enters in an alertable state, when it happens, it will instead execute our code once we inserted the code to be executed via QueueUserAPC.

About

Inject a Dll within a process, and makes the main thread to execute the dll when the main thread enters in alertable state.

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published