/Bleak

A Windows native DLL injection library written in C# that supports several methods of injection.

Primary LanguageC#MIT LicenseMIT

Bleak

Build status

A Windows native DLL injection library written in C# that supports several methods of injection.

Supported Methods

  • CreateRemoteThread
  • ManualMap
  • NtCreateThreadEx
  • QueueUserAPC
  • RtlCreateUserThread
  • SetThreadContext
  • ZwCreateThreadEx

Extensions

  • Eject DLL
  • Erase PE Headers
  • Randomise PE Headers
  • Unlink DLL From PEB

Features

  • x86 and x64 injection

Installation

  • Download and install Bleak using NuGet

Usage Example

The example below describes a basic implementation of the library.

using Bleak;

var injector = new Injector();

// Inject a dll into a process using the CreateRemoteThread method

injector.CreateRemoteThread("processName", "pathToDll");

// Erase the PE headers of a dll loaded in the process

injector.EraseHeaders("processName", "pathToDll");

Full documentation for the library can be found here

Contributing

Pull requests are welcome.

For large changes, please open an issue first to discuss what you would like to add.