[Discussion] continuing GodHack2

[topblast]

PS: I dont think Gordon's loader uses an external DLL.

[kotentopf]

PS: I dont think Gordon's loader uses an external DLL.

Than u not think right.

The Loader does not update, but the hack is updating.
How less is the chance that it is not external?

[Gordon`]

he means that im not storing the dll to the hard disk drive. the winapi LoadLibrary requires a path to the dll. its not able to inject from memory.

[Alessandro10]

Create one server FTP.....

[mo3ad001]

I'm use simple downloader and save it like "..path\Something.something"
and Inject it
you can save it as .anything and inject it :P
just change "VIPName.whatever" :P
maybe you don't need to hide it !

[topblast]

he means that im not storing the dll to the hard disk drive. the winapi LoadLibrary requires a path to the dll. its not able to inject from memory.

So

1. You are not using LoadLibrary
2. If u are Where on earth are u puttint it if it not on harddrive
3. Are u using a different Injection Function that does not use both LoadLibrary and CreateThread.

[kotentopf]

So

1. You are not using LoadLibrary
2. If u are Where on earth are u puttint it if it not on harddrive
3. Are u using a different Injection Function that does not use both LoadLibrary and CreateThread.

he is using a SSD xD

[topblast]

he is using a SSD xD

And that will bee???

[_Fk127_]

And that will bee???

A solid-state drive (SSD) is a data storage device that uses solid-state memory to store persistent data. SSDs are distinguished from traditional hard disk drives (HDDs), which are electromechanical devices containing spinning disks and movable read/write heads. SSDs, in contrast, use microchips which retain data in non-volatile memory chips and contain no moving parts. Compared to traditional HDDs, SSDs are typically less susceptible to physical shock, quieter, and have lower access time and latency. SSDs use the same interface as hard disk drives, thus easily replacing them in most applications.

Credits- Wikipedia

[jonnyboy9985]

Why can't you just get the dll from a server when the process is detected, prevent the process (Engine.exe) from continuing, until the dll is inputted, then continue?

[topblast]

IT LOOKS LIKE THE SAME PHYSICAL.. THAT is still a HARD DRIVE..

FILES ARE NOT PHYSICAL.. SO HOW DO HE INJECT WITHOUT CREATING AN EXTERNAL FILE.

[Gordon`]

Im downloading the dll into memory. I manual map it then into the process.

Inside Windows: An In-Depth Look into the Win32 Portable Executable File Format, Part 2

The only thing you have to do is to fix the imports and the relocations of the dll. Then write it to the process (PE-Header + Sections) and execute DllMain.

[Sid]

HWID is the most easiest to make lol
PM me if you want an example