admin/Offensive-Panda-ProcessInjectionTechniques
1
0
Fork 0
mirror of https://github.com/Offensive-Panda/ProcessInjectionTechniques synced 2026-06-06 16:24:33 +00:00
Code Issues Packages Projects Releases Wiki Activity

Update readme.md

Browse Source
This commit is contained in:
Usman Sikander
2024-08-30 17:24:27 +03:00
committed by GitHub
parent 9b8a5c0064
commit 210a4095d6
1 changed files with 4 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Reflective_DLL_Injection/readme.md
+4 -2
View File
@@ -1,10 +1,10 @@
<h1 align="center">Reflective DLL Injection</h1>
<p align="center">
<img src="Assets/rdll_AI.jpg" alt="CCIR" width="500px">
<img src="../Assets/rdll_AI.jpg" alt="CCIR" width="500px">
</p>
## Overview
In this lab, we explore a Reflective DLL Injection technique. By loading the DLL directly from memory without touching the disk, it evades common detection mechanisms, making it a preferred method for sophisticated malware and offensive security operations. This technique allows to execute code within the context of another process without writing the DLL to disk.
In this lab, we explore a Reflective DLL Injection technique. This technique allows to execute code within the context of another process without writing the DLL to disk. By loading the DLL directly from memory without touching the disk, it evades common detection mechanisms, making it a preferred method for sophisticated malware and offensive security operations.
## Steps
1. `Read the DLL into Memory:` This step involves to read the DLL into memory buffer.
@@ -153,6 +153,7 @@ This code execute the injected DLL's main entry point (DllMain).
## Full Code
### Loader/Injector Code
#### data.h
```cpp
#pragma once
#include <Windows.h>
@@ -170,6 +171,7 @@ typedef struct BASE_RELOCATION_ENTRY {
using DLLEntry = BOOL(WINAPI*)(HINSTANCE dll, DWORD reason, LPVOID reserved);
```
#### source.cpp
```cpp
#include <Windows.h>
#include <iostream>