Sysinternals ProcMon, Explorer, and Process Hacker Notes

HideProcessHook is a DLL that hooks the NtQuerySystemInformation API and hides a process name. explorer.exe is used in this as an example.

環境與工具. Windows 10 21H1; Process Explorer v16.32; Visual Studio 2019. Internal vs External. 要了解internal hack 跟external hack 的差別，首先要知道process ...

This malware development technique is revered by both red team operators and adversaries alike for its potency and versatility.

Process Hacker. Main Page · Namespaces · Data Structures · Files · Process Hacker. Namespaces. Data Structures. Files. File List · KProcessHacker · phlib.

NEVER inject managed assemblies. If for some reason you must inject code into another process, use native code with either NO C library or a ...

DLL injection is a technique that can be used by legitimate software to add functionality, aid with debugging, or reverse engineer software running on a ...

I've been extremely curious about game hacking/modding lately and have found that a lot of mods use dll injection to hook into whatever game it is and change ...

Task Manager - Determine 32-bit or 64-bit processes: Select 'Details' tab, Right click 'Name' column header and click 'Select Columns', then check 'Platform'

Coding it in WinAPI/C++ using Visual Studio - Installing & Setting Up Tools, Basic Concepts Blog post: ...

Implementing a game hacking trainer for Age of Empires by using Dynamic Link Library (DLL) injection. The injected DLL enables the player to ...