Lab 3: Inject Into Notepad
Objective: implement classic CreateRemoteThread + LoadLibrary
injection and use it to patch a message inside notepad.exe.
- Build a payload
evil.dllwhoseDllMainpops aMessageBox(proof of execution in the target). - Write
injector.exe:OpenProcess->VirtualAllocEx->WriteProcessMemory->GetProcAddress->CreateRemoteThread. - Launch
notepad.exe, find its PID, inject. - Extend the DLL to patch a string / hook an API so Notepad's behavior visibly changes.