What is Injector?
Injector is a little tool that will inject your code into a target process.
Injector is a POST EXPLOITATION tool. It can use generic shellcodes, that may be generated from the Metasploit framework and inject the shellcode into the target process and then run the code with the context of target process. By doing this it can evade anti viruses and provide a very powerful base for post exploitation.
Features of Injector:
- Ask for a file (provide flexibility, you can choose your own codes).
- Can provide On demand shells.(inject code into the processes and get shell).
- Evade Anti viruses(because we are not generating exe, we are injecting direct shellcode.) This is one of the most powerful technique employed with this tool set.
- Alphanumeric shellcodes are bullet proof solution for Anti viruses..
- Can backdoor a process (bind shell).
- Can provide ability to switch from one exploitation tool to other..(for eg.. inject meterpreter shellcode -Metasploit, inject bind shell –Core Impact
Video tutorial of Injector:
Injecting code into a process plus bypass AV from D0uBle ZerO Zer0 on Vimeo.
Injector is a post exploitation phase tool. It can bypass Anti viruses and can be used for demonstration purposes. It does so, by not writing the injected executable to the hard disk.
Download Injector v3 here
Searches leading to this post:10613 c exploit, bypass av ollydbg, how to inject dns server for testing, shellcode program counter
