Reply to thread

Message

<blockquote data-quote="436880927" data-source="post: 828116">C or C++ has nothing to do with this and neither does &quot;white hacker organizations&quot; (why does your race matter anyway?).Even if MemProtect is supporting the blocking of DLLs according to the rules configuration with PsSetLoadImageNotifyRoutine/Ex, it still isn&#039;t an issue - and it isn&#039;t explicit prevention of code injection either because it doesn&#039;t just block that. It doesn&#039;t change the fact that if someone is at the same privilege level as you, it is a game of cat and mouse.You might not be aware of it, but blocking &quot;DLL injection&quot; is only half of the solution. What about file-less injection? Oh, and for the record, kernel-mode callbacks like PsSetLoadImageNotifyRoutine/Ex won&#039;t stop reflective DLL loading.I don&#039;t need to put my money where my mouth is. I am not going to spend time &quot;putting my money where my mouth is&quot; on a geek security software forum. You are going to have to believe me or disbelieve me. You are more than welcome to hire a consulant and be told I am right or do necessary research and find out that I am right.Your obsession with MemProtect is concerning to me, but each to their own.</blockquote>

[QUOTE="436880927, post: 828116"] C or C++ has nothing to do with this and neither does "white hacker organizations" (why does your race matter anyway?). Even if MemProtect is supporting the blocking of DLLs according to the rules configuration with PsSetLoadImageNotifyRoutine/Ex, it still isn't an issue - and it isn't explicit prevention of code injection either because it doesn't just block that. It doesn't change the fact that if someone is at the same privilege level as you, it is a game of cat and mouse. You might not be aware of it, but blocking "DLL injection" is only half of the solution. What about file-less injection? Oh, and for the record, kernel-mode callbacks like PsSetLoadImageNotifyRoutine/Ex won't stop reflective DLL loading. I don't need to put my money where my mouth is. I am not going to spend time "putting my money where my mouth is" on a geek security software forum. You are going to have to believe me or disbelieve me. You are more than welcome to hire a consulant and be told I am right or do necessary research and find out that I am right. Your obsession with MemProtect is concerning to me, but each to their own. [/QUOTE]

Verification