plaincomb How do I cheat?
Reputation: 0
Joined: 14 Feb 2013 Posts: 4
|
Posted: Sat Mar 09, 2013 8:30 pm Post subject: CreateRemoteThread / VirtualAllocEx - (win95 --> winxp) |
|
|
If you've tried to use external dll injection on win95 / 98, you can stop being defeated by frustration.
PrcHelp
http(://)apihooks(.)com.sweb.cz/PH(.)HTM
Works on Win95 up to XP. Open source.
| Code: |
Ex.
pMem = PH_VirtualAllocEx( hProcess, NULL, memSize, MEM_COMMIT | MEM_RESERVE, PAGE_READWRITE );
// WriteProcessMemory: write dll name (path) into alloc space
PH_CreateRemoteThread( hProcess, NULL, 0, (LPTHREAD_START_ROUTINE) pfnLoadLibrary, pMem, 0, &threadId );
|
You just include his PrcHelp.h and it loads the appropriate lib for you (TurboC, Watcom, MSVC, SC). Easy and it works (successfully injected win98 calc.exe; using it for my Close Combat (1996) trainer).
NOTE:
I think Vista / Win 7 has CreateRemoteThread security and will bounce this trick. You'll probably need to use NtCreateThreadEx
http(://)securityxploded(.)com/ntcreatethreadex(.)php
|
|