Skip to content

Instantly share code, notes, and snippets.

View llxiaoyuan's full-sized avatar
🚢
Where knowledge ended, speculation began.

Chase llxiaoyuan

🚢
Where knowledge ended, speculation began.
View GitHub Profile
@llxiaoyuan
llxiaoyuan / dllinjshim.cpp
Created January 7, 2022 10:46 — forked from w4kfu/dllinjshim.cpp
DLL Injection via Shim
/*
-------- dllinjshim.cpp --------
> cl /Fe:dllinjshim.exe dllinjshim.cpp
> dllinjshim.exe
> sdbinst moo.sdb
/!\ On Windows 10 there is a new function `SdbIsKnownShimDll` called
in `SdbGetDllPath` which will check the DLL name against the following list: