{"repo":"lowleveldesign/withdll","free":true,"listed":false,"github":"https://github.com/lowleveldesign/withdll","clone":"git clone https://github.com/lowleveldesign/withdll.git","description":"A small tool to perform DLL injections","language":"C#","stars":25,"topics":["tracing","windows"],"license":"MIT","category":"analytics","readme_excerpt":"withdll - a small tool to perform DLL injections This project is inspired by a sample with the same name from the Detours repository. I decided to create it as I was missing some features in the Detours' sample (most importantly, a way to inject a DLL into a running process). To make things more interesting, I decided to implement it in C#, using generated Detours bindings and NativeAOT with static detours linking. If you are interested in the binding generation, have a look at this post on my blog. You may download the compiled binaries from the release page . Each release also contains compiled Detours sample libraries that are examples of WinAPI functions tracers. Withdll is a 64-bit application (compiled with NativeAOT and statically linked with the detours library) but supports both 32-bit and 64-bit targets. An example command line to inject a DLL into a running process with PID 1234 may look as follows: And to start, for example, winver.exe with injected traceapi libraries, you may run: Please note that you may inject multiple DLLs at once. If you compile a library for 32-bit and 64-bit architectures, add a “bitness suffix” to its base name, and withdll will replace the suffix if the target process is 32-bit. For example, if we have trcapi32.dll and trcapi64.dll in the same folder and we run withdll.exe -d trcapi64.dll C:\\Windows\\SysWow64\\winver.exe , winver.exe instance will have trcapi32.dll in its loaded module list. Finally, if you would like to always inject a DLL","default_branch":null,"files":null,"tree":[],"storefront":"/r/lowleveldesign","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/lowleveldesign/withdll/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}