Skip to content

POC demonstrating DLL Injection, API Hooking and API Unhooking.

License

Notifications You must be signed in to change notification settings

BlackHat-Ashura/Inject-Hook-Unhook_POC

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

4 Commits
 
 
 
 
 
 
 
 
 
 

Repository files navigation

Inject-Hook-Unhook_POC

POC demonstrating DLL Injection, API Hooking and API Unhooking.

How to use

1. Compile code in all the folders, i.e., "Use Simple DLL", "Simple DLL", "Inject Me Hook Me"

2. First run "Inject Me Hook Me.exe" and wait for first message box

3. Next run "Use Simple DLL.exe" with arguments as path to "Simple DLL.dll" and the PID of "Inject Me Hook Me.exe"

What's happening here?

The DLL is injected into the mentioned process and the MessageBoxW API is hooked. The process then unhooks the hooked API on the second attempt of running the hooked function.

About

POC demonstrating DLL Injection, API Hooking and API Unhooking.

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages