Gopi Krishna Komanduri wrote: > Hi Folks.. > Actually I am new to this dll injection n api hooking > implementations but have zeal to learn. I wrote a small code but it is > failing in createremotethread. Can anyone help me plz.. > > I think > reading my unindented code would be a bit hectic. So I would like to > tell you my intention. I have written a dll called sum.dll . I have > written one exe which used this dll. > Now my I want to write one app and keep a hook in this exe and call a method > from sum.dll . > I > know that hooking kernel apis is nice try as kernel32.dll will be > loaded in the same base memory address in all processes. But as I am > trying for other Dll , I have called LoadLibrary and GetProcAdress in > exe in which I want to call. > WriteProcessmemory and > Readprocessmemory apis are working fine as I could read the data which > I have written . But execution of createremotethread is not working > fine. I copy pasted my code . Plz check it. <snip>
As I said before, API hooking is outside the scope of this group. Please see my previous message. The SE_DEBUG_NAME privilege is a very broad privilege. Attempting to grant it doesn't work in all cases and, when it does work, bypasses every security checkpoint in Windows (it is more powerful than the default Administrator account). The use of SE_DEBUG_NAME is highly discouraged except in little "toy" applications (i.e. you should avoid using it in commercial software but for educational purposes, it is "okay" but should be avoided even then if at all possible). Beginners to API hooking should start with Detours. That is NOT a hint. That said, neither you, nor anyone else here, should be fiddling with API hooking (even with Detours). API hooking (especially system-wide hooks) is dangerous and everyone gets it wrong - even the various anti-virus companies...and they've been doing Windows API hooking for over a decade and they still get it wrong. -- Thomas Hruska CubicleSoft President Ph: 517-803-4197 *NEW* MyTaskFocus 1.1 Get on task. Stay on task. http://www.CubicleSoft.com/MyTaskFocus/
