Skip to content

0x251/roblox-injector

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

6 Commits
 
 
 
 
 
 

Repository files navigation

Injection POC

  • amdxx64.dll & nviapi64.dll Are both whitelisted DLL's, that roblox allow's to be loaded therfore you can use SetWindowsHookExA
  • Another method of injection is Cert Spoofing, Spoofing the Cert to any Whitelisted DLL's Cert, Require's a REG edit though to allow fake cert's https://github.com/secret-blox/secret-blox-sign
  • Rename any DLL to amdxx64.dll or nviapi64.dll and in boblox.py change the DLL_PATH & DLL_CALLBACK
  • Python12.9 must run env as Admin for OpenProcess

Dll must have an Hook Export Boblox Callback can be called anything

extern "C" __declspec(dllexport) LRESULT Boblox(int Code, WPARAM WParam, LPARAM LParam) {
    return CallNextHookEx(nullptr, Code, WParam, LParam);
}

UwU

image

About

Abusing amdxx64.dll, Whitelisted DLL roblox injection POC

Topics

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages