Timeline for Why doesn't my LoadLibraryA (LLA) hook prevent a dll injection that uses CreateRemoteThread + LLA?
Current License: CC BY-SA 4.0
3 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| May 9, 2020 at 14:59 | vote | accept | user1534664 | ||
| May 9, 2020 at 14:59 | comment | added | user1534664 | You're absolutely right. I was aware that it's quite difficult to protect against DLL injections, but I didn't understand it in as much detail as you have provided. Thanks for the explanation. The reason why I implemented this is because of a school assignment. I wanted to get some experience with DLL injections first hand because I recall using it as a scriptkiddie over a decade ago :P I had no prior experience with Windows API and the PE format, so this was really educational. | |
| May 9, 2020 at 9:23 | history | answered | CBHacking | CC BY-SA 4.0 |