Search found 26 matches

by Bevan Collins
Mon Nov 30, 2020 1:57 am
Forum: madCodeHook
Topic: problem with CopyFunction
Replies: 11
Views: 4264

Re: problem with CopyFunction

oops sorry about uploading the .lib files. I've deleted the download.

Your version works on my test machine.
by Bevan Collins
Thu Nov 26, 2020 7:40 pm
Forum: madCodeHook
Topic: problem with CopyFunction
Replies: 11
Views: 4264

Re: problem with CopyFunction

Hi Iconic Yes, can you please upload your binary. CopyFunction still fails for me on 64bit. WOW64 seems to be ok. Here is my VS2019 test project (*** Edited out ***) Thanks ***Edit*** I've downloaded your project but have also erased the link of your archive file on this forum, I have a copy locally...
by Bevan Collins
Tue Nov 24, 2020 8:41 am
Forum: madCodeHook
Topic: problem with CopyFunction
Replies: 11
Views: 4264

Re: problem with CopyFunction

I'm using MCH 4.1.3 (madCHook64mt.lib), Windows 10 20H2, VisualStudio 16.8.2
by Bevan Collins
Fri Nov 20, 2020 6:51 pm
Forum: madCodeHook
Topic: problem with CopyFunction
Replies: 11
Views: 4264

Re: problem with CopyFunction

Similar issue? viewtopic.php?f=5&t=27462

When building for x86, I have to link with madCHook32mt.lib and madCHook32.lib for CopyFunction. For other functions I only need to link with madCHook32mt.lib. Not sure if it's related.
by Bevan Collins
Thu Nov 19, 2020 3:42 am
Forum: madCodeHook
Topic: problem with CopyFunction
Replies: 11
Views: 4264

problem with CopyFunction

Hi, can someone please help me? I am having a problem with CopyFunction from madCodeHook4 in the following test code where 6760 is the pid of notepad.exe: #include <windows.h> #include <madchook.h> DWORD WINAPI remoteProcess(LPVOID) { return 1; } int main() { InitializeMadCHook(); HANDLE process = O...
by Bevan Collins
Thu Aug 06, 2020 11:00 pm
Forum: madCodeHook
Topic: not injecting into the system process
Replies: 11
Views: 6289

Re: not injecting into the system process

I have tried using /integritycheck linker option along with signtool /ph option as documented here: https://social.technet.microsoft.com/wiki/contents/articles/255.forced-integrity-signing-of-portable-executable-pe-files.aspx but I still get event ID 5038 or 6281. I think maybe my dll needs to be co...
by Bevan Collins
Thu Aug 06, 2020 10:12 pm
Forum: madCodeHook
Topic: not injecting into the system process
Replies: 11
Views: 6289

Re: not injecting into the system process

ok, great. Here is the event log if you are interested: Log Name: Security Source: Microsoft-Windows-Security-Auditing Date: 8/6/2020 9:39:07 PM Event ID: 5038 Task Category: System Integrity Level: Information Keywords: Audit Failure User: N/A Computer: debug-windows10-64 Description: Code integrit...
by Bevan Collins
Thu Aug 06, 2020 7:44 am
Forum: madCodeHook
Topic: not injecting into the system process
Replies: 11
Views: 6289

Re: not injecting into the system process

Thanks Iconic,

I'm seeing this in Windows 10 1909. I just tried excluding "System" but it didn't help.
by Bevan Collins
Thu Aug 06, 2020 5:06 am
Forum: madCodeHook
Topic: not injecting into the system process
Replies: 11
Views: 6289

not injecting into the system process

I would like to inject into all processes except the Windows system process (PID 4), but I am having trouble doing so: ULONG exclude_pids[] = {4, 0}; // exclude system process (4), list must finish with 0 BOOL rc = InjectLibraryW(INJECTION_DRIVER_NAME, dll.c_str(), ALL_SESSIONS, INJECT_METRO_APPS | ...
by Bevan Collins
Mon Apr 29, 2019 8:38 pm
Forum: madCollection
Topic: Unable to inject a dll using madcodehook driver for app stor
Replies: 21
Views: 21150

Re: Unable to inject a dll using madcodehook driver for app

oops INJECT_METRO_APPS was missing, working now. Thanks iconic
by Bevan Collins
Sun Apr 28, 2019 10:33 pm
Forum: madCollection
Topic: Unable to inject a dll using madcodehook driver for app stor
Replies: 21
Views: 21150

Re: Unable to inject a dll using madcodehook driver for app

sorry to drag up this old thread. Did this issue get resolved? I'm also unable to inject into App Store applications on Windows 10.0.17763 64bit. I have tested using HookProcessCreation after adding "ALL APPLICATION PACKAGES" NTFS read/execute rights to the folder. Windows Photos app, cand...
by Bevan Collins
Mon Feb 19, 2018 2:40 am
Forum: madCodeHook
Topic: Permanent Injections problem
Replies: 8
Views: 5433

Re: Permanent Injections problem

The work-around I used was to install a windows service that called InjectLibrary with permanent = FALSE and then exited. It would be much nicer if the permanent flag worked though.
by Bevan Collins
Wed Feb 14, 2018 9:58 am
Forum: madCodeHook
Topic: Permanent Injections problem
Replies: 8
Views: 5433

Re: Permanent Injections problem

I am also facing this problem with madCodeHook 4.0.4. I inject permanently a 32bit and a 64bit dll. Before reboot, the dlls are injected into running and new processes. But after reboot only the 32bit dll is injected. I have been able to replicate it on Windows 10 (16299) and Windows 8.1 (9600) but ...
by Bevan Collins
Mon Jul 17, 2017 4:24 am
Forum: madCodeHook
Topic: problems with 4.0.1, 4.0.2 and Windows 10 x86
Replies: 9
Views: 9228

Re: problems with 4.0.1, 4.0.2 and Windows 10 x86

no, still the same problem with madCollectionBeta.exe (2.8.3.0)
by Bevan Collins
Fri Apr 21, 2017 7:25 am
Forum: madCodeHook
Topic: problems with 4.0.1, 4.0.2 and Windows 10 x86
Replies: 9
Views: 9228

Re: problems with 4.0.1, 4.0.2 and Windows 10 x86

When I tested the beta, I updated everything but I didn't use an exclude mask when injecting.