tklengyel / drakvuf

DRAKVUF Black-box Binary Analysis
https://drakvuf.com
Other
1.06k stars 253 forks source link

Proper use of injector #890

Closed JordanBoulan closed 4 years ago

JordanBoulan commented 4 years ago

Hi,

I am trying to figure out how to properly use the injector. Does it work with DLL's? I don't see any manual mapping or fixing of relocs etc in injector code but I am still familiarizing myself.

I created both an .exe and a .dll to try both of which open a simple message box.

I opened a notepad in the vm for injection and run:

sudo injector -r /home/jade/win10_2.json -d 3 -i 6756 -e /home/jade/tst/tst.exe (or .dll)

DRAKVUF injector v0.7-git20200519164913+aa3625d-1 Copyright (C) 2014-2020 Tamas K Lengyel
Injector starting /home/jade/tst/tst.exe through PID 6756 TID: 0

The console just hangs forever and nothing happens. I tried specifying different injection methods as well. I have a feeling I am missing something simple. If I get this working id be willing to write a wiki page or tutorial on using it.