4 ms·

If you need to hook methods in a remote process (and also inject payload), you may also consider the Detours library [1]. It has a straightforward API and its r

If you need to hook methods in a remote process (and also inject payload), you may also consider the Detours library [1]. It has a straightforward API and its repository contains many interesting samples. One thing I was missing in the library was a function to inject code into a running process. So I wrote takedetour [2] which I use as a template for my other projects. Maybe you will find it useful as well. [1] https://github.com/microsoft/Detours https://github.com/microsoft/Detours [2] https://github.com/lowleveldesign/takedetour https://github.com/lowleveldesign/takedetour

wslh 4y ago
Even not being Microsoft, our hooking engines are also extremely robust and has additional features (higher level interface to hook in any language and hooking COMs and .NET): https://github.com/nektra/Deviare2 https://github.com/nektra/Deviare2 https://github.com/nektra/Deviare-InProc https://github.com/nektra/Deviare-InProc, and https://github.com/nektra/RemoteBridge https://github.com/nektra/RemoteBridge They are being used in well known security companies and intelligence organizations.