开源软件名称(OpenSource Name):bats3c/DarkLoadLibrary开源软件地址(OpenSource Url):https://github.com/bats3c/DarkLoadLibrary开源编程语言(OpenSource Language):C 98.4%开源软件介绍(OpenSource Introduction):DarkLoadLibrary
How does it work?https://www.mdsec.co.uk/2021/06/bypassing-image-load-kernel-callbacks/ UsageDARKMODULE DarkModule = DarkLoadLibrary(
LOAD_LOCAL_FILE, // control flags
L"TestDLL.dll", // local dll path, if loading from disk
NULL, // dll buffer to load from if loading from memory
0, // dll size if loading from memory
NULL // dll name if loaded from memory
); Control Flags:
DLL Path:This can be any path that DLL Buffer:This argument is only needed when DLL Size:This argument is only needed when DLL Name:This argument is only needed when ConsiderationsThe windows loader is very complex and can handle all the edge case's and intricacies of loading DLLs. There are going to be edge case's which I have not had the time to discover, reverse engineer and implement. So there's going to be DLLs that this loader simply will not work with. That being said I plan on making this loader as complete as possible, so please open issue's for DLLs that are not correctly loaded. |
2023-10-27
2022-08-15
2022-08-17
2022-09-23
2022-08-13
请发表评论