Amazing, can't believe I just found out about your channel
@WndSks
9 ай бұрын
Even if they had write access to system32, dropping a call there means it actually has to implement the API. A dll in the application folder just hooks what it wants in DllMain and forwards all it's exported functions to the real one in system32. Also, AV will freak out if you mess with system32 and updates might kill your drop.
@dayzerosec
9 ай бұрын
Ah fair point thanks. I forgot about that aspect. ~zi
Пікірлер: 3