DLL Injection Registration Form

0x00 nagging

Writing this series of articles is purely for the system to learn DLL injection method, so many methods may be outdated, I hope you crossing do not spray. Of course, if there is a better way, hope not greasy enlighten. If there is anything wrong with this article, I hope you will correct me. Thank you!

0X01 Application Platform

Windows nt/2000/xp/2003

0x02 principle

By modifying the registry key value: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Nt\currentversion\windows\appinit_dlls. Add the absolute path of the DLL that needs to be injected to the key, so that when the system launches a program that uses User32.dll, the DLL that the key value contains is loaded by invoking the LoadLibrary function. Once the key value is added, the program started after this (which needs to be used to User32.dll) will load our DLL to achieve the purpose of injection.

DLL Injection Registration Form