Friday 15 April 2011

.net - Detecting Process Creation -


Let me have a third-party NET application process will be detected. My goal is to inject a plugin DLL to increase the functionality of this app. I like to inject it as soon as possible so I can catch the initial events of the application. Is there any way to find out that when this process is made and the main is injected before DLL?

The common solution is to replace the target address image with a stub, which launches the original image under controlled parameters Does.

There are other ways, such as, but they are meant for debugging for normal operation.


No comments:

Post a Comment