Forums
-
Community Links
-
Terms, Privacy Policy & Frequently Asked Questions (244,920 visits to this link)
-
-
Community Discussions
-
- 2.3k
- posts
-
-
Developers Forums
-
- 12.7k
- posts
-
- 417
- posts
-
- The Free Programming E-Books Topic
- By Progman,
-
- 927
- posts
-
- help for macOs protector
- By khodam,
-
-
Reverse Code Engineering
-
- 14.6k
- posts
-
- ConfuserEx 1.6.0
- By jackyjask,
-
- 229
- posts
-
- 452
- posts
-
- Get past an Incapsula block HTTP request
- By Progman,
-
- 1.7k
- posts
-
- Polymorphic Parasite (x86) WriteUp
- By Luca91,
-
- 2.5k
- posts
-
- Revteam Reverse Engineering Collection
- By kar2rost,
-
- 197
- posts
-
-
Community Projects
-
- 506
- posts
-
- Scylla Imports Reconstruction Source
- By Progman,
-
- 1.3k
- posts
-
- How to use x64dbgida plugin
- By neomkingdom,
-
- 148
- posts
-
- 820
- posts
-
- Driver doesn't want to start
- By Progman,
-
-
Member Statistics
25,397
Total Members7,713
Most Online
Newest Member
akaded
Joined
-
Posts
-
By Luca91 · Posted
Thank you, I’ll definitely read it tonight! RIP Mark Ludwig 🪦 I still have his “The little black book of computer viruses” on my bedside table, bought from Amazon US more than 15 years ago! -
By JMC31337 · Posted
i may banter a lil in the opening, but that is how i was taught when i was in highschool learning ASM from the ukranians and russians, bootkits from the chinese You give a short shoutout or point to be made and ya write and code Here, i use the LCRN (LCG) from the GiantBlack Book of Viruses (Physicist Dr. Mark Ludwig) and his 16-bit many hoops and recreated it for x86 (32 bit) VXWriteUp.pdf -
-
By modz50 · Posted
no create an assembly loader to load the dll and then use dnspy and the rest -
By Luca91 · Posted
Nice example @jackyjask Yes, assuming you have a way to load the unsigned driver (by exploiting a signed driver that is not black listed, or by running NT in test mode) and you are calling these APIs from the driver itself, this should work. I never tried it personally tho. So I’m not 100% sure and there could be further hitches.
-
-
Popular Contributors
-
1
lovejoy226
33 -
2
jackyjask
18 -
3
CodeExplorer
17 -
4
LCF-AT
14 -
5
Luca91
12
-
-
Files
-
-
File Comments
-
-
By Teerayoot · Posted
1.43 +fix pass command line in Manual Map option. +check old byte before patch (1337 file) +detect x86 or x64 file image if not same exe will crash. Remote Process Injector1.43.zip -
-
By Teerayoot · Posted
release 1.42 +support x86 injection(LdrLoadDll) +fix bug(load patch file) Remote Process Injector1.42.rar -
By Teerayoot · Posted
I released new version to 1.4 +dlll manual map +random tittle name .Remote Process Injector1.4.zip
-
-
Tell a friend
