Alo,
Recently I got in the mood to mess around with XignCode since it looks like this section is struggling with it. For now I just want to release a method that makes a singular .dll injection completely undetected.
The technique is really cheap, simple, and it's awkward that it even works. It works by forwarding the exported x3.xem dispatcher. The xc3 dispatcher is basically a GetProcAddress interpretation for their (xc3) own purposes.
To get my code working you just need to rename the dll "x3.xem" in the xigncode folder to "x3.dummy". Then simply rename your .dll to "x3.xem".
You should also be able to do static, undetected, memory changes inside the client's memory because xigncode isn't loaded yet. Meaning it hasn't had the chance to generate memory page checksums.
Regards,
K1ramoX
Recently I got in the mood to mess around with XignCode since it looks like this section is struggling with it. For now I just want to release a method that makes a singular .dll injection completely undetected.
The technique is really cheap, simple, and it's awkward that it even works. It works by forwarding the exported x3.xem dispatcher. The xc3 dispatcher is basically a GetProcAddress interpretation for their (xc3) own purposes.
To get my code working you just need to rename the dll "x3.xem" in the xigncode folder to "x3.dummy". Then simply rename your .dll to "x3.xem".
You should also be able to do static, undetected, memory changes inside the client's memory because xigncode isn't loaded yet. Meaning it hasn't had the chance to generate memory page checksums.
Regards,
K1ramoX