View Single Post
  #1  
Old 23-11-2017, 17:13
Razor12911's Avatar
Razor12911 Razor12911 is offline
Noob
 
Join Date: Jul 2012
Location: South Africa
Posts: 3,751
Thanks: 2,185
Thanked 11,211 Times in 2,309 Posts
Razor12911 is on a distinguished road
Quote:
Originally Posted by ravencrow View Post
When we use decoy DLL, we exploit the fact that loadlibrary first looks for the DLL in the directory where the exe is and then looks up in windows index, but in razor's case it different.
I tested this a few days ago and it works and I don't think it matters whether implicit or explicit method of linking a library was used, might be wrong but method works.
Reply With Quote
The Following 6 Users Say Thank You to Razor12911 For This Useful Post:
Andu21 (24-11-2017), Crynuvo (23-11-2017), oltjon (23-11-2017), ravencrow (24-11-2017), shazzla (23-11-2017), Simorq (23-11-2017)
Sponsored Links