Hello!

What is the safest way to inject your code into another application process? For example, combinations:

1) OpenProcess -> VirtualAllocEx -> SuspendThread -> GetThreadContext -> SetThreadContext -> ResumeThread.

and

2) OpenProcess -> VirtualAllocEx -> WriteProcessMemoey -> CreateRemoteThread.

Scorching with all modern antiviruses, as a result, the program will be quarantined, as its antivirus will be considered as a virus. What are your suggestions on this? Thank!

  • But is it impossible to declare a program trusted in the antivirus? - avp

1 answer 1

All documented methods of injecting are, of course, known to antiviruses and scorching by them; there is simply no universal way of an Un-documented inject that is suitable for all Avers! Someone raises rights with sploit and loads his driver, someone uses obscure OLE functions.

  • Eh ... I thought so ... - AseN