Reply to thread

Message

<blockquote data-quote="JM Safe" data-source="post: 786664" data-attributes="member: 35684">Sometimes we read that malware infections start thanks to .dll files code injection. But what is a DLL? A DLL (Dynamic Link Library) is a library which can contains methods (pieces of source code that could return a result for example an integer, a string, boolean, etc.), but obviously methods could also return nothing (but instead this type of methods do stuff in the body of the method but without a result, this is called void method).The power of DLL files is that they can be used by software by importing them and use library source code without rewrite all the source code of the library, but instead use simply and fastly the DLL source code. To stay a bit safer against DLL injection it is possible to do not permit processes to get high privileges, so privilege escalation.Example of DLL:[CODE=csharp]namespace DLL1{&nbsp; &nbsp; public class DLL1Class&nbsp; &nbsp; {&nbsp; &nbsp; &nbsp; &nbsp; public static int algorithm(int n)&nbsp; &nbsp; &nbsp; &nbsp; {&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; n++; //do a simple increment here&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; return n;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; }&nbsp; &nbsp; }}[/CODE]Ok guys, now to use a method of a DLL we can use this:[CODE=csharp]DLL1.DLL1Class.algorithm(6);[/CODE]</blockquote>

[QUOTE="JM Safe, post: 786664, member: 35684"] Sometimes we read that malware infections start thanks to .dll files code injection. But what is a DLL? A DLL (Dynamic Link Library) is a library which can contains methods (pieces of source code that could return a result for example an integer, a string, boolean, etc.), but obviously methods could also return nothing (but instead this type of methods do stuff in the body of the method but without a result, this is called void method). The power of DLL files is that they can be used by software by importing them and use library source code without rewrite all the source code of the library, but instead use simply and fastly the DLL source code. To stay a bit safer against DLL injection it is possible to do not permit processes to get high privileges, so privilege escalation. Example of DLL: [CODE=csharp]namespace DLL1 { public class DLL1Class { public static int algorithm(int n) { n++; //do a simple increment here return n; } } }[/CODE] Ok guys, now to use a method of a DLL we can use this: [CODE=csharp]DLL1.DLL1Class.algorithm(6);[/CODE] [/QUOTE]

Verification