http://blog.didierstevens.com/2010/02/16/memoryloadlibrary-from-c-program-to-shellcode/ (blog 'DidierStevens) Sat, 11 Feb 2012 16:16:49 +0000 hourly 1 http://wordpress.com/ http://blog.didierstevens.com/2010/02/16/memoryloadlibrary-from-c-program-to-shellcode/#comment-38355 Mon, 26 Apr 2010 09:17:56 +0000 http://blog.didierstevens.com/?p=1996#comment-38355 @Anonymous You’ll notice that the DLL is just appended to the shellcode (when you open the file with a hex editor). Just replace the bytes of the DLL with your own DLL.

]]> http://blog.didierstevens.com/2010/02/16/memoryloadlibrary-from-c-program-to-shellcode/#comment-38309 Tue, 20 Apr 2010 15:47:55 +0000 http://blog.didierstevens.com/?p=1996#comment-38309 Hi,
Thank you for sharing this.
i have qustion, how can i replace the dll in ShellCodeMemoryModule.exe.bin with cmd.dll?

]]> http://blog.didierstevens.com/2010/02/16/memoryloadlibrary-from-c-program-to-shellcode/#comment-37803 Tue, 09 Mar 2010 00:01:31 +0000 http://blog.didierstevens.com/?p=1996#comment-37803 [...] of the graphics. I took Solitaire from ReactOS, turned it into a DLL and embedded it with my memory loading shellcode into Excel macros (the same technique as I developed for cmd.dll and regedit.dll). I imagine that a [...]

]]>