Jump to content


Check out our Community Blogs

Register and join over 40,000 other developers!


Recent Status Updates

View All Updates

Photo
- - - - -

detect injected dlls


  • Please log in to reply
2 replies to this topic

#1 ostudioo

ostudioo

    CC Newcomer

  • Just Joined
  • PipPip
  • 10 posts

Posted 02 August 2008 - 12:37 PM

i was wondering how would i go about doing this:

program gui:

Load button

upon clicking load a third-party program will open. ex: a game, another program
then the detection code begins.. if any dll injected after clicking "LOAD" that corresponds to that program (like adjusts the programs memory, code, w/e (I DONT REALLY KNO) then close the program.

thx.
  • 0

#2 whoiga

whoiga

    CC Newcomer

  • Just Joined
  • PipPip
  • 15 posts

Posted 02 August 2008 - 02:46 PM

I suppose it depends on the operating environment. If on a Windows Operating System, you'll most likely be involved with some API calls, since (as far as I know, which is little on this subject) DLL injection is performed primarily by Windows API calls.

As for injection or detecting injection in a *nix environment, you may be looking at a totally different approach.

Here's at least one interesting page to take note of regarding detecting DLL injection:

Blocking .dll Injection : Visual C++ Language : Visual C++ : MSDN Forums
  • 0

#3 TkTech

TkTech

    The Crazy One

  • Retired Mod
  • PipPipPipPipPipPipPip
  • 1144 posts
  • Location:Ottawa, Ontario

Posted 02 August 2008 - 03:12 PM

Most DLL injection on windows is done with the Detours API ( I used this at school to many evil intents :D )
  • 0
Helpful CODECALL Links: Join Us, Guidelines, FAQ, Post a Tutorial




Recommended from our users: Dynamic Network Monitoring from WhatsUp Gold from IPSwitch. Free Download