IDontCode
/
reverse-injector
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity
inject a process into your context.
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
10 Commits
1 Branch
2 Tags
200 KiB
 
Branches Tags
${ item.name }
Create tag ${ searchTerm }
Create branch ${ searchTerm }
from 'ad41281f05'
${ noResults }
Go to file
IDontCode ad41281f05
Update README.md 		4 years ago
reverse-injector renamed the project and added added a try/catch in 4 years ago
README.md Update README.md 4 years ago
reverse-injector.sln renamed the project and added added a try/catch in 4 years ago

README.md

reverse-injector

Inject a process into your context. You can call functions that do not reference absolute virtual addresses. Reverse injector copies a target processes pml4e's into another specified processes pml4. Current the project copies the targets pml4e's into the current process (reverse-injector.exe), but you can configure the project to inject a process into any process you want.

Info

VDM ---> PTM ---> reverse-injector

The project uses PTM which uses VDM. Althought VDM is utilized in this project you do not need to have VDM's vulnerable driver loaded into the kernel when creating an injector_ctx. As you can see in the demo I have modified VDM to change how it reads and writes to physical memory. I make VDM use a mem_ctx object to read/write physical memory. (mem_ctx is PTM). PTM manages its own set of paging tables from usermode and does not need a vulnerable driver after it has been initalized.