Search found 55 matches
- Thu Jul 05, 2018 10:27 am
- Forum: madCodeHook
- Topic: how to prevent dll loading
- Replies: 13
- Views: 13211
Re: how to prevent dll loading
I don't think it's a problem to inject a hook dll into every running process, as long as the hook dll is small, lightweight and doesn't do anything bad. Most madCodeHook users use this approach and it seems to work well. It is not a real problem, but I am sure it will make many clients to be happie...
- Thu Jul 05, 2018 10:16 am
- Forum: madCodeHook
- Topic: Injection driver evaluation
- Replies: 1
- Views: 3883
Injection driver evaluation
Hello, I have some test environment and I want to run it there to make sure there are no issues with all products installed in this environment. Is there any way to get a trial license with very limited time for testing the driver injection before buying the product ? Apologize for too many question...
- Thu Jul 05, 2018 10:00 am
- Forum: madCodeHook
- Topic: how to prevent dll loading
- Replies: 13
- Views: 13211
Re: how to prevent dll loading
I've tried LdrRegisterDllNotification, but it wasn't stable for me. I need to do things that require the loader lock. This is true, but this API is much nicer as long as it is not hooked by itself :) I am not familiar with your code, but several APIs can be workarounded, like self implemented GetPr...
- Thu Jul 05, 2018 9:48 am
- Forum: madCodeHook
- Topic: Dll injection on boot
- Replies: 6
- Views: 6870
Re: Dll injection on boot
Does it work well with .NET and Java processes ?
Next driver is that one you are going to release next week ? Will it be part of v4 or you will release v5 ?
Next driver is that one you are going to release next week ? Will it be part of v4 or you will release v5 ?
- Thu Jul 05, 2018 9:25 am
- Forum: madCodeHook
- Topic: Dll injection on boot
- Replies: 6
- Views: 6870
Re: Dll injection on boot
1. This is okay. I just need to be able to cover all Windows services. 2. Loading dll as early as possible is the feature I need. Glad to hear it will be ready soon. Is there any document describing how injection driver works ? Can you write a few words how driver loads the dll ? Does it patch dlls ...
- Thu Jul 05, 2018 9:20 am
- Forum: madCodeHook
- Topic: how to prevent dll loading
- Replies: 13
- Views: 13211
Re: how to prevent dll loading
Do you plan to introduce using LdrRegisterDllNotification instead of LdrLoadDll hook ? I think it will be very handy to minimize number of hooks. The only problem I encountered with this approach that you must not use API which acquire loader lock, e.g. GetProcAddress . At least this was situation i...
- Thu Jul 05, 2018 9:08 am
- Forum: madCodeHook
- Topic: Dll injection on boot
- Replies: 6
- Views: 6870
Re: Dll injection on boot
I think I found the answer here:
http://help.madshi.net/DllInjecting.htm
Is it correct ?
Btw, is there any explanation what is file mask ?
Can I use only wildcards , or there are more options ?
Thanks
http://help.madshi.net/DllInjecting.htm
Code: Select all
// permanent: shall the dll be injected permanently? (= stay active after reboots)
Btw, is there any explanation what is file mask ?
Can I use only wildcards , or there are more options ?
Thanks
- Thu Jul 05, 2018 9:03 am
- Forum: madCodeHook
- Topic: Dll injection on boot
- Replies: 6
- Views: 6870
Dll injection on boot
Hello,
Do you have functionality to configure driver to run on boot and inject dll automatically in all processes as early as possible ?
If there is no such, how can I achieve this ?
Do you have functionality to configure driver to run on boot and inject dll automatically in all processes as early as possible ?
If there is no such, how can I achieve this ?
- Thu Jul 05, 2018 8:00 am
- Forum: madCodeHook
- Topic: Relative jump hook
- Replies: 3
- Views: 4923
Re: Relative jump hook
Wunderbar !
That's great news.
That's great news.
- Thu Jul 05, 2018 7:52 am
- Forum: madCodeHook
- Topic: Relative jump hook
- Replies: 3
- Views: 4923
Relative jump hook
Hallo, I have asked this several years ago. When do you plan to include relative jump instead of absolute ? I am choosing a hooking framework and dll injection for my new project and you are a good candidate. Unfortunately 6-byte jump sometimes makes other programs to behave poorly. This should not ...