Comments by Member 11142020 (Top 2 by date)

Member 11142020 9-Oct-14 19:22pm View

I already told how I do it, by using WriteProcessMemory.
There's nothing wrong with how I do it, it works fine.
I just want a hookcode which does something different.

Get function address to NtOpenProcess, overwrite with jmp to my allocated memory where I have my hookcode stored.

Member 11142020 9-Oct-14 18:18pm View

That is why it says ASM + VB.NET
I'm hooking from a .NET application the ntdll's ntopenprocess function of a foreign process, pretty obvious

Advertise
Privacy
Cookies
Terms of Use
Last Updated 1 Jan 1900

Layout: fixed | fluid