Foro de elhacker.net

BOOL InjectDLL(DWORD ProcessID, char *Dll_Name)
{ 
	HANDLE Proc;
	HANDLE RemoteThread;
	LPVOID RemoteString, LoadLibAddres;
	int Retorno;

	Proc = OpenProcess(CREATE_THREAD_ACCESS, FALSE, ProcessID);
	cout << " " << "OpenProcess: " << Proc << endl;

	LoadLibAddres = (LPVOID)GetProcAddress(GetModuleHandle("kernel32.dll"), "LoadLibraryA");
	cout << " " << "Base Address of LoadLibraryA: " << LoadLibAddres << endl;

	RemoteString = (LPVOID)VirtualAllocEx(Proc, NULL, strlen(Dll_Name)+1, MEM_RESERVE|MEM_COMMIT, PAGE_READWRITE);
	cout << " " << "VirtualAllocEx: " << RemoteString << endl;
	
	Retorno = WriteProcessMemory(Proc, (LPVOID)RemoteString, Dll_Name, strlen(Dll_Name)+1, NULL);
	cout << " " << "WriteProcessMemory: " << Retorno << endl;

	RemoteThread = CreateRemoteThread(Proc, NULL, NULL, (LPTHREAD_START_ROUTINE)LoadLibAddres, (LPVOID)RemoteString, NULL, NULL);
	cout << " " << "CreateRemoteThread: " << RemoteThread << endl;

	CloseHandle(Proc);
	cout << " " << "Closing Handle" << endl;

	return 0;
}