Search found 9 matches

by danett18
Wed Aug 23, 2006 4:17 pm
Forum: madCodeHook
Topic: Use MadHook to create FileMon generic? Patch EntryPoint ?
Replies: 5
Views: 4404

No one can help me ? Madshi ? :(

Thank you,

Cheers
by danett18
Thu Aug 17, 2006 5:23 pm
Forum: madCodeHook
Topic: Use MadHook to create FileMon generic? Patch EntryPoint ?
Replies: 5
Views: 4404

Hi uall, Thank you for fast reply. 1) Its possible hooking ntdll.NtCreateFile Good to know. So I can hook other too like NtOpenFile(), etc. Is there any source code example in C that I can read? 2) not possible with mad*, if you know the PE filestructure and little bit ASM its possible to do that in...
by danett18
Thu Aug 17, 2006 4:15 pm
Forum: madCodeHook
Topic: Use MadHook to create FileMon generic? Patch EntryPoint ?
Replies: 5
Views: 4404

Use MadHook to create FileMon generic? Patch EntryPoint ?

Hi there, I need make two distinct kind of patchs so I would like if MadHook can make any of this two or both, and if yes a snippet code reference in C that I can use as reference, please. :) (1) Is possible use MadHook to create a kind FileMon that intercept ALL calls to files and folders in Window...
by danett18
Tue Aug 15, 2006 3:21 am
Forum: madCodeHook
Topic: Inject code in a cmd shell ? Detect filesystem?
Replies: 3
Views: 3488

Hi Madshi,

Thank you for reply! ;)

(1) I tryed but it always fail to inject in process not owned by me, since I don't have administrative privilegies. Because of it I thinked in Shatter Attacks.... any idea? :(

(2) Thank you, it worked using GetVolumeInformation().

Thankz

Cheers
by danett18
Mon Aug 14, 2006 6:20 pm
Forum: madCodeHook
Topic: Inject code in a cmd shell ? Detect filesystem?
Replies: 3
Views: 3488

Inject code in a cmd shell ? Detect filesystem?

Hy there, I'm trying do two things in Win32 C without sucess, so if someof you can give me a help of what API's or Madshi librarys use or better some code snipet. ;) 1) I have a normal account in my system and there exist a process running with privilegie of other normal user (but not the same that ...
by danett18
Sun Aug 06, 2006 3:09 pm
Forum: fun talk
Topic: off-topic: Good forums of Win32 programming?
Replies: 0
Views: 15448

off-topic: Good forums of Win32 programming?

Hi there, I think it's off-topic so I'm posting at this section that I belive to be the right place. :) Do you know some GOOD forum (except madshi forum) about Win32 programming related to security with a bunch of active members that help about injections of process, threads, device drivers developm...
by danett18
Sun Aug 06, 2006 2:39 pm
Forum: madCodeHook
Topic: Hook as non privilegied user? AntiVirus? Documentation ?
Replies: 4
Views: 4380

Hy there,

Thank you for all replys, unhapilly as I expected isn't a ellegant way to create a wide hook as normal user... :(

Many thank you, this forum is really good!

Cheers
by danett18
Fri Aug 04, 2006 2:28 am
Forum: madCodeHook
Topic: Hook as non privilegied user? AntiVirus? Documentation ?
Replies: 4
Views: 4380

Hi Ironic,

Thank you for reply. :)

1) And without use madCodeHook is possible make it with any native Windows resource?

Thank you and sorry for a off-topic question, but maybe it can be intersting to others...

Regards,
by danett18
Thu Aug 03, 2006 11:16 pm
Forum: madCodeHook
Topic: Hook as non privilegied user? AntiVirus? Documentation ?
Replies: 4
Views: 4380

Hook as non privilegied user? AntiVirus? Documentation ?

Hi all, I heard from this project and loved, so I solved give a check, I have some basic doubts if you can clear it for me I would be happy. :) 1) I would like to know if is possible hook a API function like CreateProcessAsUser(), etc as a normal user (non administrator), obvious I understand this h...