MPGHThe Dark Arts
RegisterLog in

Inject dll into process PID

Posts 1–6 of 6 · Page 1 of 1
Inject dll into process PID
Good evening, I spent a few days looking for the subject I mentioned in the title, "Inject dll in PID" ie "inject dll in process pid" '-', in case I have a difficulty in making this injection code.
For example...
This is the process -> "CombatArms.exe"
This is the PID -> "2000"
*(PROCESS, PID, DLL)

I want to inject the dll into the process PID and I do not know how to do this line of code.
*
If anyone can help me, thank you!
#1 ·
You can't inject a .net DLL into a native operating programm.
There are ways to do this but they are horribly laborious.

You can inject .net DLL's into .net programms.

If you want to inject a DLL into native programms you need to write a native DLL (for example with C++).
#2 ·
Code:
 Dim dlls As New Dictionary(Of String, String)

    Private Declare Function OpenProcess Lib "kernel32" (ByVal dwDesiredAccess As Integer, ByVal bInheritHandle As Integer, ByVal dwProcessId As Integer) As Integer
    Private Declare Function VirtualAllocEx Lib "kernel32" (ByVal hProcess As Integer, ByVal lpAddress As Integer, ByVal dwSize As Integer, ByVal flAllocationType As Integer, ByVal flProtect As Integer) As Integer
    Private Declare Function WriteProcessMemory Lib "kernel32" (ByVal hProcess As Integer, ByVal lpBaseAddress As Integer, ByVal lpBuffer() As Byte, ByVal nSize As Integer, ByVal lpNumberOfBytesWritten As UInteger) As Boolean
    Private Declare Function GetProcAddress Lib "kernel32" (ByVal hModule As Integer, ByVal lpProcName As String) As Integer
    Private Declare Function GetModuleHandle Lib "kernel32" Alias "GetModuleHandleA" (ByVal lpModuleName As String) As Integer
    Private Declare Function CreateRemoteThread Lib "kernel32" (ByVal hProcess As Integer, ByVal lpThreadAttributes As Integer, ByVal dwStackSize As Integer, ByVal lpStartAddress As Integer, ByVal lpParameter As Integer, ByVal dwCreationFlags As Integer, ByVal lpThreadId As Integer) As Integer
    Private Declare Function WaitForSingleObject Lib "kernel32" (ByVal hHandle As Integer, ByVal dwMilliseconds As Integer) As Integer
    Private Declare Function CloseHandle Lib "kernel32" (ByVal hObject As Integer) As Integer

    Private Function Inject(ByVal pID As Integer, ByVal dllLocation As String) As Boolean

        Dim hProcess As Integer = OpenProcess(&H1F0FFF, 1, pID)
        If hProcess = 0 Then Return False
        Dim dllBytes As Byte() = System.Text.Encoding.ASCII.GetBytes(dllLocation)
        Dim allocAddress As Integer = VirtualAllocEx(hProcess, 0, dllBytes.Length, &H1000, &H4)
        If allocAddress = Nothing Then Return False
        Dim kernelMod As Integer = GetModuleHandle("kernel32.dll")
        Dim loadLibAddr = GetProcAddress(kernelMod, "LoadLibraryA")
        If kernelMod = 0 OrElse loadLibAddr = 0 Then Return False
        WriteProcessMemory(hProcess, allocAddress, dllBytes, dllBytes.Length, 0)
        Dim libThread As Integer = CreateRemoteThread(hProcess, 0, 0, loadLibAddr, allocAddress, 0, 0)

        If libThread = 0 Then
            Return False
        Else
            WaitForSingleObject(libThread, 5000)
            CloseHandle(libThread)
        End If
        CloseHandle(hProcess)
        Label3.Text = "DLL Successfully Injected." & vbNewLine & "@get: 0x" & allocAddress.ToString()
        If CheckBox1.Checked = True Then
            Me.Close()
        End If

        Return True
    End Function

    Inject(PROC_ID, DLL_PATH)
Quote Originally Posted by RoPMadM View Post
You can't inject a .net DLL into a native operating programm.
There are ways to do this but they are horribly laborious.

You can inject .net DLL's into .net programms.

If you want to inject a DLL into native programms you need to write a native DLL (for example with C++).
#3 · edited ·

Quote Originally Posted by return_cheats View Post
Code:


   

Spoiler


 Dim dlls As New Dictionary(Of String, String)

    Private Declare Function OpenProcess Lib "kernel32" (ByVal dwDesiredAccess As Integer, ByVal bInheritHandle As Integer, ByVal dwProcessId As Integer) As Integer
    Private Declare Function VirtualAllocEx Lib "kernel32" (ByVal hProcess As Integer, ByVal lpAddress As Integer, ByVal dwSize As Integer, ByVal flAllocationType As Integer, ByVal flProtect As Integer) As Integer
    Private Declare Function WriteProcessMemory Lib "kernel32" (ByVal hProcess As Integer, ByVal lpBaseAddress As Integer, ByVal lpBuffer() As Byte, ByVal nSize As Integer, ByVal lpNumberOfBytesWritten As UInteger) As Boolean
    Private Declare Function GetProcAddress Lib "kernel32" (ByVal hModule As Integer, ByVal lpProcName As String) As Integer
    Private Declare Function GetModuleHandle Lib "kernel32" Alias "GetModuleHandleA" (ByVal lpModuleName As String) As Integer
    Private Declare Function CreateRemoteThread Lib "kernel32" (ByVal hProcess As Integer, ByVal lpThreadAttributes As Integer, ByVal dwStackSize As Integer, ByVal lpStartAddress As Integer, ByVal lpParameter As Integer, ByVal dwCreationFlags As Integer, ByVal lpThreadId As Integer) As Integer
    Private Declare Function WaitForSingleObject Lib "kernel32" (ByVal hHandle As Integer, ByVal dwMilliseconds As Integer) As Integer
    Private Declare Function CloseHandle Lib "kernel32" (ByVal hObject As Integer) As Integer

    Private Function Inject(ByVal pID As Integer, ByVal dllLocation As String) As Boolean

        Dim hProcess As Integer = OpenProcess(&H1F0FFF, 1, pID)
        If hProcess = 0 Then Return False
        Dim dllBytes As Byte() = System.Text.Encoding.ASCII.GetBytes(dllLocation)
        Dim allocAddress As Integer = VirtualAllocEx(hProcess, 0, dllBytes.Length, &H1000, &H4)
        If allocAddress = Nothing Then Return False
        Dim kernelMod As Integer = GetModuleHandle("kernel32.dll")
        Dim loadLibAddr = GetProcAddress(kernelMod, "LoadLibraryA")
        If kernelMod = 0 OrElse loadLibAddr = 0 Then Return False
        WriteProcessMemory(hProcess, allocAddress, dllBytes, dllBytes.Length, 0)
        Dim libThread As Integer = CreateRemoteThread(hProcess, 0, 0, loadLibAddr, allocAddress, 0, 0)

        If libThread = 0 Then
            Return False
        Else
            WaitForSingleObject(libThread, 5000)
            CloseHandle(libThread)
        End If
        CloseHandle(hProcess)
        Label3.Text = "DLL Successfully Injected." & vbNewLine & "@get: 0x" & allocAddress.ToString()
        If CheckBox1.Checked = True Then
            Me.Close()
        End If

        Return True
    End Function

    Inject(PROC_ID, DLL_PATH)

lol
This will just inject the DLL into a process, but the code wich got injected won‘t work at all. Perhabs it will crash
.net DLL's need the CLR and the JIT compiler to run/create native code
Your code will only work for .net DLL's injected to .net processes.
#4 · edited ·
Quote Originally Posted by RoPMadM View Post
You can't inject a .net DLL into a native operating programm.
There are ways to do this but they are horribly laborious.
Something like https://github.com/biesigrr/clrbtstrp
#5 ·
Posts 1–6 of 6 · Page 1 of 1

Post a Reply

Similar Threads

Blackshot HelpHow To Inject DLLs Into BlackShotSESeanwong98 12 C++/C ProgrammingC++ Manually Inject Dll to process.nullptr_tnullptr_t 0 Blackshot Helphow to inject dll into blackshot (32bit)awaltora11 4 Blackshot HelpINJECT DLL INTO BLACKSHOTacem007acem007 7 Blackshot Helphow to inject dll to process 32bitHEheadehd 3

Tags for this Thread

None

Talk with us