#include <Windows.h>
#include <TlHelp32.h>
#include <stdio.h>
#include <stdlib.h>
 
typedef HINSTANCE(*fpLoadLibrary)(char*);
 
DWORD GetPidByName(const char* processname)
{
        HANDLE hProcessSnap;
        PROCESSENTRY32 p;
        hProcessSnap = CreateToolhelp32Snapshot(TH32CS_SNAPPROCESS, 0);
        p.dwSize = sizeof(PROCESSENTRY32);
        if (Process32First(hProcessSnap, &p))
        {
                do{
                        if (!strcmp(processname, p.szExeFile)) return (p.th32ProcessID);
                } while (Process32Next(hProcessSnap, &p));
                return (-1);
        }
        else return (-1);
}
 
 
 
int main(int argc, char **argv)
{
 
        if (argc != 3)
        {
                printf("#DLL INJECTOR BY SAKIIR !\n");
                printf("\tUsage : ./injector <process.exe> <DLL_PATH>\n");
                printf("\tExemple : ./injector iexplorer.exe C:\\inject_me.dll\n");
                Sleep(3000);
                ExitProcess(1);
        }
 
    typedef UINT (CALLBACK* LPFNDLLFUNC1)(DWORD,UINT);
    STARTUPINFOA startupInfo;
    //PROCESS_INFORMATION processInformation;
    char PROCESS[1024];
    char DLL_PATH[1024];
    HINSTANCE hDLL;
    DWORD PID;
    HANDLE hProcess;
 
    printf("\n\n#DLL INJECTOR BY SAKIIR !\n\n");
    printf("[*] Getting Arguments..\n");
    strncpy(PROCESS, argv[1], 1023);
    strncpy(DLL_PATH, argv[2], 1023);
    printf("[+] Arguments Gotten !\n");
    printf("[*] Process Name : %s\n",PROCESS);
    printf("[*] DLL Name : %s\n", DLL_PATH);
 
 
    hDLL = GetModuleHandleA("kernel32");
    LPFNDLLFUNC1 pLoadLibrary = (LPFNDLLFUNC1)GetProcAddress(hDLL,"LoadLibraryA");
    printf("[*] LoadLibrary() : 0x%x\n",pLoadLibrary);
 
    printf("[*] Getting Process ID of %s...\n",PROCESS);
    while((PID = GetPidByName(PROCESS)) == -1) Sleep(500);
    printf("[+] Process ID Gotten !\n");
 
    printf("[*] Openning Process With All Access...\n");
    hProcess = OpenProcess(PROCESS_ALL_ACCESS, 0, PID);
    if(hProcess == NULL)
    {
        printf("[-] Failed To OpenProcess :(...\n");
        exit(1);
    }
    printf("[+] Successfully Created Process !\n");
 
 
    // Allocating Virtual Memory
    printf("[*] Allocating Virtual Memory ... \n");
    void* pReservedSpace = VirtualAllocEx(hProcess,NULL,strlen(DLL_PATH),MEM_COMMIT,PAGE_EXECUTE_READWRITE);
    if(!pReservedSpace)
    {
        printf("[-] Failed To VirtualAllocEx() ...\n");
        exit(1);
    }
    printf("[+] Succefully : Allocating Memory\n");
 
 
 
    //Writing Into Virtual Memory
    printf("[*] Writing Into Virtual Memory...\n");
    if(!WriteProcessMemory(hProcess,pReservedSpace,DLL_PATH,strlen(DLL_PATH),NULL))
    {
        printf("[-] Failed To WriteProcessMemory() ...\n");
        exit(1);
    }
    printf("[+] Succefully : Writing Into Memory\n");
 
 
 
    //Creating Remote Thread
    printf("[*] Creating Remote Thread..\n");
    HANDLE hThread = CreateRemoteThread(hProcess, NULL, 0, (LPTHREAD_START_ROUTINE)pLoadLibrary, pReservedSpace, 0, NULL);
    if(!hThread)
    {
        printf("[-] Failed To CreateRemoteThread() ...\n");
        exit(1);
    }
     printf("[+] Succefully : Creating Remote Thread\n");
     printf("[+] Thread is Created !\n");
 
    WaitForSingleObject(hThread,INFINITE);
    VirtualFreeEx(hProcess,pReservedSpace,strlen(DLL_PATH),MEM_COMMIT);
    printf("[+] END ! :)\n");
    return 0;
}