unmanaged struct Context64 about boo

[masonwheeler]

Good to hear you got it working! 😄

[masonwheeler]

I don't see any obvious problem. So either there's something wrong with your struct definition, or there's something wrong with the function call, or there's something wrong with the original code. So try this:

• First, verify that it works in C#.
• Then, add the C# test as a dependency of your Boo project. Try calling the method from Boo, with the C# version of the struct.
• Then try calling the C# method with the Boo version of the struct.

At one of these three points, it should break. That should tell you where the problem lies.

[physics-sec]

That is a great idea, thank you!

[physics-sec]

Well I am using this repo now: https://github.com/pwndizzle/c-sharp-memory-injection/blob/master/thread-hijack.cs
And I can confirm it works properly.
Same issue if I translate the structs/enums into my Boo script

I am not sure how to add that project to my Boo script as a dependency, do you have any resource or example I can see?
I don't wan't to waste much of your time

The idea of adding external dependencies to my Boo scripts sounds great. So far, I have been loading the .net assembly of some compiled program and then invoking the methods I want. I can just try that, but not sure how much informations it would give us about the issue

Boo is truly amazing, especially the compile from memory feature
Is like .net python, I love it

[physics-sec]

Ok, turns out that the struct was well defined,
the issue was how I was calling GetThreadContext. I needed to add the line in the middle:

        context = CONTEXT64()
        context.ContextFlags = CONTEXT_FLAGS.CONTEXT_FULL
        success = GetThreadContext(threadHandle, context)

Sorry to wast your time!