[Mono-dev] Runtime IL Injection

Brandon Perry bperry.volatile at gmail.com
Tue Jul 1 02:20:45 UTC 2014


I think the correct solution is to make the on-disk check pass even if you
modify the binary. Maybe a detour for the file access winapi.


On Mon, Jun 30, 2014 at 9:07 PM, Alex Rønne Petersen <alex at alexrp.com>
wrote:

> We do not currently have any functionality that allows you to do this.
>
> On Tue, Jul 1, 2014 at 3:46 AM, Drew Crawford <drew at sealedabstract.com>
> wrote:
> > Hello folks,
> >
> > I've got a rather large program that I don't have source to. I believe
> it runs Mono 3.5.
> >
> > I'm trying to modify the behavior of this program; specifically, I'm
> trying to replace one of its classes. Normally this would be a pretty
> straightforward Mono.Cecil operation, but it turns out the program verifies
> its on-disk representation at startup in a way that is difficult to defeat.
> >
> > I can, however, convince the program to load an arbitrary managed DLL,
> so this has got me thinking about the possibility of doing run-time
> manipulation and code injection of the process using the DLL as an
> entrypoint. I have seen some code samples of this online for .NET but I
> can't seem to find anyone doing this for Mono.
> >
> > Can anyone point me in the right direction?
> >
> > Drew
> >
> >
> > _______________________________________________
> > Mono-devel-list mailing list
> > Mono-devel-list at lists.ximian.com
> > http://lists.ximian.com/mailman/listinfo/mono-devel-list
> _______________________________________________
> Mono-devel-list mailing list
> Mono-devel-list at lists.ximian.com
> http://lists.ximian.com/mailman/listinfo/mono-devel-list
>



-- 
http://volatile-minds.blogspot.com -- blog
http://www.volatileminds.net -- website
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ximian.com/pipermail/mono-devel-list/attachments/20140630/185c71b3/attachment.html>


More information about the Mono-devel-list mailing list