ch0ic3/MalwareSourceCode
1
0
Fork 0
mirror of https://github.com/vxunderground/MalwareSourceCode.git synced 2024-12-23 11:55:26 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity
900263ea6f
MalwareSourceCode/Win32/Proof of Concepts/ExtraWindowInject/README.md
vxunderground 900263ea6f updates and moves 
n/a
2022-04-11 20:00:13 -05:00

484 B
Raw Blame History

inject_shellcode

Small compendium of injection techniques commonly used in malware demonstrated on metasploit-generated shellcode

Various objects of injection:

  • existing process (found by name)
  • newly created process

Demonstrated methods:

  • Running shellcode in a new thread
  • Adding shellcode into existing thread (using NtQueueApcThread)
  • Patching Entry Point of the process
  • Patching context of the process
  • Injecting into Tray Window (using SetWindowLong)