Kernel-dll-injector
Kernel-dll-injector copied to clipboard
Kernel-Mode Driver that loads a dll into every new created process that loads kernel32.dll module
Kernel-dll-injector
Kernel-Mode Driver that loads a dll into every new created process that loads kernel32.dll module Code is based on reversed rootkit Sirifef aka max++, one of the most well coded rootkits for Windows Operating Systems of all time
How to use
Project is compiled using VS 2013 and WDK 8.1, if you use a new version simply upgrade the whole project, should work just fine Windows x86 version only Place your dll in whatever location, compile the driver with the new dll path Load the driver Dll should inject in every new process that needs to load kernel32.dll
Limitations
Not compatible with x64, but adaptability its pretty much straightforward Not sure about the impact the whole process injection can cause on the system, tested the project for about 1 hour and no BSOD's whatsoever
More Information
https://alexvogtkernel.blogspot.com/2018/09/kernel-injection-code-reversing-sirifef.html