在Windows平台上，本地和远程库注射技术

多年来一直存在。作为开采技术的远程库注入

在2004年推出Skape和JT[1]。他们的技术采用的shellcode修补主机进程NTDLL在运行时库，并迫使Windows加载本地加载动态链接库DLL）从内存中的镜象。这种技术的叫做反射DLL注入。-Under the Windows platform, library injection techniques both local and remote have

been around for many years. Remote library injection as an exploitation technique was

introduced in 2004 by Skape and JT[1]. Their technique employs shellcode to patch the

host processes ntdll library at run time and forces the native Windows loader to load a

Dynamic Link Library (DLL) image from memory. As an alternative to this technique I

present Reflective DLL Injection.