RemoteHooking Methods

Creates a new process which is started suspended until you call WakeUpProcess from within your injected library Run() method. This allows you to hook the target BEFORE any of its usual code is executed. In situations where a target has debugging and hook preventions, you will get a chance to block those mechanisms for example...

Creates a new process which is started suspended until you call WakeUpProcess from within your injected library Run() method. This allows you to hook the target BEFORE any of its usual code is executed. In situations where a target has debugging and hook preventions, you will get a chance to block those mechanisms for example...

Determines whether the specified Object is equal to the current Object.

Will execute the given static method under system privileges.

Allows an object to try to free resources and perform other cleanup operations before it is reclaimed by garbage collection.

Returns the current native system process ID.

Returns the current native system thread ID.

Serves as a hash function for a particular type.

Returns the WindowsIdentity of the user the target process belongs to. You need PROCESS_QUERY_INFORMATION access to the target.

Gets the Type of the current instance.

See Inject(Int32, InjectionOptions, String, String, Object) for more information.

Injects the given user library into the target process. No memory leaks are left in the target, even if injection fails for unknown reasons.

Loads the given driver into the kernel and immediately marks it for deletion. The installed driver will be registered with the service control manager under the InDriverName you specify. Please note that you should use IsX64System to find out which driver to load. Even if your process is running on 32-Bit this does not mean, that the OS kernel is running on 32-Bit!

Installs the EasyHook support driver. After this step you may use InstallDriver(String, String) to install your kernel mode hooking component.

Connects to a globally reachable, managed IPC port.

Creates a globally reachable, managed IPC-Port.

Creates a globally reachable, managed IPC-Port.

Determines if the target process is 64-bit or not. This will work only if the current process has PROCESS_QUERY_INFORMATION access to the target.

Creates a shallow copy of the current Object.

Returns a string that represents the current object.

If the library was injected with CreateAndInject(String, String, Int32, InjectionOptions, String, String, Int32, Object), this will finally start the current process. You should call this method in the library Run() method after all hooks have been installed.