Showing posts with label code reference. Show all posts
Showing posts with label code reference. Show all posts

Sunday, June 28, 2009

Remote Code Injection For All Windows Versions

References
1. "Three ways to inject your code into another process" by Robert Kuster.
http://www.codeproject.com/threads/winspy.asp
2. "Remote Library" by António Feijão.
http://www.codeproject.com/win32/remote.asp
3. "PrcHelp" by Radim Picha.
http://www.apihooks.com/OUT/CPRPICHA.ZIP
4. "Windows 95 System Programming Secrets" by Matt Pietrek.
http://www.wheaty.net/
5. "Windows NT/2000 Native API Reference" by Gary Nebbett.
http://www.amazon.com/exec/obidos/ASIN/1578701996/systemsinternals
6. "A Crash Course on the Depths of Win32 Structured Exception Handling" by Matt Pietrek.
http://www.microsoft.com/msj/0197/exception/exception.aspx
7. "Enumerating Windows Processes" by Alex Fedotov.
http://www.alexfedotov.com/articles/enumproc.asp

For Win9x stuff see [4] (99 % of the Win9x code comes from this book).
I don't know any equivalent book for NT, but two usefull books (not directly related to remote code injection) are:
- "Undocumented Windows NT" by P. Dabak, M. Borate, S. Phadke (http://www.windowsitlibrary.com/Documents/Book.cfm?DocumentID=356)
- "Microsoft Windows Internals, 4th ed." by M. Russinovich, D. Solomon