Search found 55 matches

by _NN_
Thu Jul 05, 2018 10:27 am
Forum: madCodeHook
Topic: how to prevent dll loading
Replies: 13
Views: 13211

Re: how to prevent dll loading

I don't think it's a problem to inject a hook dll into every running process, as long as the hook dll is small, lightweight and doesn't do anything bad. Most madCodeHook users use this approach and it seems to work well. It is not a real problem, but I am sure it will make many clients to be happie...
by _NN_
Thu Jul 05, 2018 10:16 am
Forum: madCodeHook
Topic: Injection driver evaluation
Replies: 1
Views: 3883

Injection driver evaluation

Hello, I have some test environment and I want to run it there to make sure there are no issues with all products installed in this environment. Is there any way to get a trial license with very limited time for testing the driver injection before buying the product ? Apologize for too many question...
by _NN_
Thu Jul 05, 2018 10:00 am
Forum: madCodeHook
Topic: how to prevent dll loading
Replies: 13
Views: 13211

Re: how to prevent dll loading

I've tried LdrRegisterDllNotification, but it wasn't stable for me. I need to do things that require the loader lock. This is true, but this API is much nicer as long as it is not hooked by itself :) I am not familiar with your code, but several APIs can be workarounded, like self implemented GetPr...
by _NN_
Thu Jul 05, 2018 9:48 am
Forum: madCodeHook
Topic: Dll injection on boot
Replies: 6
Views: 6870

Re: Dll injection on boot

Does it work well with .NET and Java processes ?

Next driver is that one you are going to release next week ? Will it be part of v4 or you will release v5 ?
by _NN_
Thu Jul 05, 2018 9:25 am
Forum: madCodeHook
Topic: Dll injection on boot
Replies: 6
Views: 6870

Re: Dll injection on boot

1. This is okay. I just need to be able to cover all Windows services. 2. Loading dll as early as possible is the feature I need. Glad to hear it will be ready soon. Is there any document describing how injection driver works ? Can you write a few words how driver loads the dll ? Does it patch dlls ...
by _NN_
Thu Jul 05, 2018 9:20 am
Forum: madCodeHook
Topic: how to prevent dll loading
Replies: 13
Views: 13211

Re: how to prevent dll loading

Do you plan to introduce using LdrRegisterDllNotification instead of LdrLoadDll hook ? I think it will be very handy to minimize number of hooks. The only problem I encountered with this approach that you must not use API which acquire loader lock, e.g. GetProcAddress . At least this was situation i...
by _NN_
Thu Jul 05, 2018 9:08 am
Forum: madCodeHook
Topic: Dll injection on boot
Replies: 6
Views: 6870

Re: Dll injection on boot

I think I found the answer here:
http://help.madshi.net/DllInjecting.htm

Code: Select all

// permanent:       shall the dll be injected permanently? (= stay active after reboots)
Is it correct ?

Btw, is there any explanation what is file mask ?
Can I use only wildcards , or there are more options ?

Thanks
by _NN_
Thu Jul 05, 2018 9:03 am
Forum: madCodeHook
Topic: Dll injection on boot
Replies: 6
Views: 6870

Dll injection on boot

Hello,
Do you have functionality to configure driver to run on boot and inject dll automatically in all processes as early as possible ?
If there is no such, how can I achieve this ?
by _NN_
Thu Jul 05, 2018 8:00 am
Forum: madCodeHook
Topic: Relative jump hook
Replies: 3
Views: 4923

Re: Relative jump hook

Wunderbar !
That's great news.
by _NN_
Thu Jul 05, 2018 7:52 am
Forum: madCodeHook
Topic: Relative jump hook
Replies: 3
Views: 4923

Relative jump hook

Hallo, I have asked this several years ago. When do you plan to include relative jump instead of absolute ? I am choosing a hooking framework and dll injection for my new project and you are a good candidate. Unfortunately 6-byte jump sometimes makes other programs to behave poorly. This should not ...