Thread: Packet editing
View Single Post
Cpp

JCF Member

Joined: Mar 2001

Posts: 1,557

Cpp is doing well so far

Mar 9, 2008, 01:11 PM
Cpp is offline
Reply With Quote
Yes. I've always used the second method and I've written a simple proxy function in Visual Basic 6. The function takes an address of the assembly function you wish to execute and four extra parameters. Then it injects a number of bytes into the target process and executes them by creating a new thread. The injected assembly code then takes care of the rest.

Unfortunately I can't show you any of the code right now as I don't have it handy. I'll likely upload an example onto my server when I have time.
__________________
<a href="http://nmap.org/"><img border="0" alt="Nmap Security Scanner" src="http://images.insecure.org/nmap/images/prop/nmap_bnr_matrix_pfos.gif"/></a>