help dll injection

Posts 1–6 of 6 · Page 1 of 1
help dll injection
I have this code

Code:
Imports System.Net
Imports System.Management
Public Class xhackx
    Private TargetProcessHandle As Integer
    Private pfnStartAddr As Integer
    Private pszLibFileRemote As String
    Private TargetBufferSize As Integer

    Public Const PROCESS_VM_READ = &H10
    Public Const TH32CS_SNAPPROCESS = &H2
    Public Const MEM_COMMIT = 4096
    Public Const PAGE_READWRITE = 4

    Public Const PROCESS_CREATE_THREAD = (&H2)
    Public Const PROCESS_VM_OPERATION = (&H8)
    Public Const PROCESS_VM_WRITE = (&H20)
    Dim DLLFileName As String
    Public Declare Function ReadProcessMemory Lib "kernel32" ( _
    ByVal hProcess As Integer, _
    ByVal lpBaseAddress As Integer, _
    ByVal lpBuffer As String, _
    ByVal nSize As Integer, _
    ByRef lpNumberOfBytesWritten As Integer) As Integer

    Public Declare Function LoadLibrary Lib "kernel32" Alias "LoadLibraryA" ( _
    ByVal lpLibFileName As String) As Integer

    Public Declare Function VirtualAllocEx Lib "kernel32" ( _
    ByVal hProcess As Integer, _
    ByVal lpAddress As Integer, _
    ByVal dwSize As Integer, _
    ByVal flAllocationType As Integer, _
    ByVal flProtect As Integer) As Integer

    Public Declare Function WriteProcessMemory Lib "kernel32" ( _
    ByVal hProcess As Integer, _
    ByVal lpBaseAddress As Integer, _
    ByVal lpBuffer As String, _
    ByVal nSize As Integer, _
    ByRef lpNumberOfBytesWritten As Integer) As Integer

    Public Declare Function GetProcAddress Lib "kernel32" ( _
    ByVal hModule As Integer, ByVal lpProcName As String) As Integer

    Private Declare Function GetModuleHandle Lib "Kernel32" Alias "GetModuleHandleA" ( _
    ByVal lpModuleName As String) As Integer

    Public Declare Function CreateRemoteThread Lib "kernel32" ( _
    ByVal hProcess As Integer, _
    ByVal lpThreadAttributes As Integer, _
    ByVal dwStackSize As Integer, _
    ByVal lpStartAddress As Integer, _
    ByVal lpParameter As Integer, _
    ByVal dwCreationFlags As Integer, _
    ByRef lpThreadId As Integer) As Integer

    Public Declare Function OpenProcess Lib "kernel32" ( _
    ByVal dwDesiredAccess As Integer, _
    ByVal bInheritHandle As Integer, _
    ByVal dwProcessId As Integer) As Integer

    Private Declare Function FindWindow Lib "user32" Alias "FindWindowA" ( _
    ByVal lpClassName As String, _
    ByVal lpWindowName As String) As Integer

    Private Declare Function CloseHandle Lib "kernel32" Alias "CloseHandle" ( _
    ByVal hObject As Integer) As Integer

    Public Function xHack()
  Dim cpuInfo As String = String.Empty
  Dim mcx As New ManagementClass("win32_processor")
  Dim mocx As ManagementObjectCollection = mcx.GetInstances()

  For Each mo As ManagementObject In mocx
    If cpuInfo = "" Then
    cpuInfo = mo.Properties("processorID").Value.ToString()
    Exit For
    End If
  Next

  Dim HWIDx As String

  HWIDx = cpuInfo
  Dim wc As New WebClient
  Dim strings As String
  strings = wc.DownloadString("http://riscript.com/hwid.txt") 'Link to your uploaded file. 
  If strings.Contains(HWIDx) Then  'If it does, show the program.
    MsgBox("Press OK when you started Counter-Strike")
    Call Injection()
  Else
    Call sayHWID() ' it will get sayHWID located down below.
    MsgBox("You have no enter to xHack") 'give message and close application
    Me.Close()
  End If
    End Function
    Public Function sayHWID() 'this is the sayHWID
  Dim cpuInfo As String = String.Empty
  Dim mc As New ManagementClass("win32_processor")
  Dim moc As ManagementObjectCollection = mc.GetInstances()

  For Each mo As ManagementObject In moc
    If cpuInfo = "" Then
    cpuInfo = mo.Properties("processorID").Value.ToString()
    Exit For
    End If
  Next
  MsgBox("Your HWID is : " & cpuInfo & " and has been copied to clipboard") ' Tell user his HWID and that is been copied to clipboard
  Clipboard.SetDataObject(cpuInfo, True) 'copy hwid to clipboard
    End Function
    Public Function Status()
  lstatus.Text = "xHack Succesfully Injected" ' change label status
  lstatus.ForeColor = Color.Lime ' change label color
  MsgBox("xHack Succesfully Injected") 'gives message
    End Function

    Private Sub lstatus_Click(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles lstatus.Click

    End Sub
    Public Function Injection()
  Dim TargetProcess As Process() = Process.GetProcessesByName("hl.exe") ' this look for process hl.exe
  If TargetProcess.Length = 0 Then MsgBox("Can't find process") : Exit Function
  TargetProcessHandle = OpenProcess(PROCESS_CREATE_THREAD Or PROCESS_VM_OPERATION Or PROCESS_VM_WRITE, False, TargetProcess(0).Id)
  pszLibFileRemote = My.Resources.raiz.IsReadOnly ' add as resource xhack.dll and replace raiz with xhack
  pfnStartAddr = GetProcAddress(GetModuleHandle("Kernel32"), "LoadLibraryA")
  TargetBufferSize = 1 + Len(pszLibFileRemote)
  Dim Rtn As Integer
  Dim LoadLibParamAdr As Integer
  LoadLibParamAdr = VirtualAllocEx(TargetProcessHandle, 0, TargetBufferSize, MEM_COMMIT, PAGE_READWRITE)
  Rtn = WriteProcessMemory(TargetProcessHandle, LoadLibParamAdr, pszLibFileRemote, TargetBufferSize, 0)
  CreateRemoteThread(TargetProcessHandle, 0, 0, pfnStartAddr, LoadLibParamAdr, 0, 0)
  CloseHandle(TargetProcessHandle)
  Call Status()
    End Function
    Private Sub xhackxx_Load(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles MyBase.Load
  Call xHack() ' dont add anything here,it will all be done at xHack Function
    End Sub
End Class
Can you do what I write here or how to do it ??

this

Code:
 pszLibFileRemote = My.Resources.raiz.IsReadOnly '
How can I make it so it will inject the DLL from the resource..?

because with this code
Code:
 pszLibFileRemote = My.Resources.raiz.IsReadOnly '
I cant inject the DLL named raiz into the process
That crappy source only injects the file path of the DLL.
Quote Originally Posted by master131 View Post
That crappy source only injects the file path of the DLL.
You blind or some shit?
No I meant that's what it's designed to do.
No, it writes the dll path to memory, then calls LoadLibraryA and passes in the pointer, standard injection
Posts 1–6 of 6 · Page 1 of 1

Post a Reply

Similar Threads

Tags for this Thread

None

Talk with us