We are going to explore this a bit by writing a Python DLL injector that will enable us to pop a DLL into any process we choose. This is extremely useful, for instance, to evade software firewalls that let only certain applications make outbound connections. The nice thing about DLL injection is that we can write a compiled binary, load it into a process, and have it execute as part of the process. Even security products inject DLLs to monitor processes for malicious behavior. From fancy Windows shell extensions that give you a glittering pony for a mouse cursor to a piece of malware stealing your banking information, DLL injection is everywhere. Everywhere you look you will see DLL injection occurring. DLL injection has been used for both good and evil for quite some time.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. Archives
March 2023
Categories |