Reflective DLL Injection Template
$149.99
Reflective DLL Injection — Position-Independent Loader
DLL template with an embedded reflective loader: relocates itself, resolves its imports and calls DllMain from remote memory. No disk write, no LoadLibrary, no PEB Ldr entry.
- Loader: PEB walk to export resolution, base relocation processing, import directory resolution, DllMain invocation. Verified position-independent: zero external symbols/calls in the reflective region on x86 and x64 (objdump review).
- v2.1 fixes: RVA_TO_RAW rewritten MSVC-compatible; DLL Machine field validated against the injector build; x86 thunk width corrected (4-byte pointers).
- Injector: VirtualAllocEx + WriteProcessMemory + CreateRemoteThread; reports the actual remote result instead of assuming success.
- Template DllMain: drop-in skeleton for your payload (reverse shell, keylogger, credential dumper).
- Prebuilt binaries included: injector32/64.exe + payload32/64.dll.
Key Features
- Position-independent reflective loader: self-relocation, import resolution, DllMain invocation without the system loader
- MSVC-compatible RVA_TO_RAW (was GNU-only in v2.0)
- Architecture check: DLL Machine field vs injector build
- Fixed x86 thunk width in the loader
- Injector harness: VirtualAllocEx / WriteProcessMemory / CreateRemoteThread
- Loader verified free of external calls on x86 and x64 (position independence)
Requirements
- Windows 10/11 target (x86 or x64)
- MinGW-w64 or MSVC to compile (instructions in README)
Changelog
- 2.1 (2026-10-19): MSVC-compatible RVA_TO_RAW, architecture check, x86 thunk fix, PIC verification, README rebuilt
- 2.0 (2025-02-20): store release
Package Contents
Exact contents of the download archive (9 files):
| reflective_dll_injection.c | 13,507 B |
| payload32.dll | 81,326 B |
| reflective_dll.c | 13,331 B |
| README.md | 1,683 B |
| injector64.exe | 279,865 B |
| payload64.dll | 89,468 B |
| exports.def | 48 B |
| reflective_loader.h | 2,195 B |
| injector32.exe | 262,273 B |