Results 12 comments of Thierry
trafficstars

No worries at all, contributions are always welcome and using a library means I don't have to re-invent the wheel to get the functionality I want is great benefit. I...

I do plan on uploading it to NuGet. Right now there are two more features I would like to add before releasing there: * Create process suspended and inject DLL...

Hi @Trojaner, I have uploaded the CoreHook project to NuGet and you can find an example that uses the NuGet package here: https://www.nuget.org/packages/CoreHook/ and the example: https://github.com/unknownv2/corehook-plugins Does that work...

Hi @Akaion, Yes, I would like help with that. Currently, the Detours module has an export for creating and injecting a DLL into a suspended process but I'm not sure...

@Akaion Yes, an implementation like this: https://github.com/unknownv2/CoreHook.Hooking/blob/master/src/creatwth.cpp#L791. I'm not sure if something like DetourUpdateProcessWithDllEx(source: https://github.com/unknownv2/CoreHook.Hooking/blob/master/src/creatwth.cpp#L584) has been implemented in C# yet.

@Akaion The stealthier methods would be preferred but CreateRemoteThread is fine as well since that might be easier to implement without any side-effects. Do you have a method in mind...

@Akaion Thank you for the information and suggestions, your library looks great. I will play around with those methods and I would like to use the manual map method then...

@Akaion, I would appreciate that a lot if you can please!

@Akaion You can find the code that starts the process here: https://github.com/unknownv2/CoreHook/blob/master/src/CoreHook.BinaryInjection/RemoteInjection/RemoteInjector.cs#L85 I definitely need to better document the usage, I'm sorry about that. I wanted to start the process...

@Akaion I did not know that! That sounds perfect then. We can continue the discussion for this here if that's alright with you: https://github.com/unknownv2/CoreHook/issues/113. Thank you!