Skip to content

Kernel-Mode Driver that loads a dll into every new created process that loads kernel32.dll module

Notifications You must be signed in to change notification settings

luxbin/Kernel-dll-injector

 
 

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

3 Commits
 
 
 
 

Repository files navigation

Kernel-dll-injector

Kernel-Mode Driver that loads a dll into every new created process that loads kernel32.dll module
Code is based on reversed rootkit Sirifef aka max++, one of the most well coded rootkits for Windows Operating Systems of all time

How to use

Project is compiled using VS 2013 and WDK 8.1, if you use a new version simply upgrade the whole project, should work just fine
Windows x86 version only
Place your dll in whatever location, compile the driver with the new dll path
Load the driver
Dll should inject in every new process that needs to load kernel32.dll

Limitations

Not compatible with x64, but adaptability its pretty much straightforward
Not sure about the impact the whole process injection can cause on the system, tested the project for about 1 hour and no BSOD's whatsoever

More Information

https://alexvogtkernel.blogspot.com/2018/09/kernel-injection-code-reversing-sirifef.html

About

Kernel-Mode Driver that loads a dll into every new created process that loads kernel32.dll module

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages

  • C 94.5%
  • C++ 5.5%