Sunday, June 28, 2009

Remote Code Injection For All Windows Versions

References
1. "Three ways to inject your code into another process" by Robert Kuster.
http://www.codeproject.com/threads/winspy.asp
2. "Remote Library" by António Feijão.
http://www.codeproject.com/win32/remote.asp
3. "PrcHelp" by Radim Picha.
http://www.apihooks.com/OUT/CPRPICHA.ZIP
4. "Windows 95 System Programming Secrets" by Matt Pietrek.
http://www.wheaty.net/
5. "Windows NT/2000 Native API Reference" by Gary Nebbett.
http://www.amazon.com/exec/obidos/ASIN/1578701996/systemsinternals
6. "A Crash Course on the Depths of Win32 Structured Exception Handling" by Matt Pietrek.
http://www.microsoft.com/msj/0197/exception/exception.aspx
7. "Enumerating Windows Processes" by Alex Fedotov.
http://www.alexfedotov.com/articles/enumproc.asp

For Win9x stuff see [4] (99 % of the Win9x code comes from this book).
I don't know any equivalent book for NT, but two usefull books (not directly related to remote code injection) are:
- "Undocumented Windows NT" by P. Dabak, M. Borate, S. Phadke (http://www.windowsitlibrary.com/Documents/Book.cfm?DocumentID=356)
- "Microsoft Windows Internals, 4th ed." by M. Russinovich, D. Solomon

No comments:

Post a Comment