ch
Feedback

不要被骗子欺骗!Telemetrio 会找到并标记这些频道 👉 如果想查看标记,请订阅

Source Byte

Source Byte

前往频道在 Telegram

هشیار کسی باید کز عشق بپرهیزد وین طبع که من دارم با عقل نیامیزد Saadi Shirazi 187

显示更多
8 569
订阅者
+224 小时
+467 天
+21130 天
帖子存档
Black hat: process injection techniques - Gotta catch them all https://youtu.be/xewv122qxnk?si=MvVaE9RLQCPQ67wn #malware_analysis #malware_dev

Ali
Techniques that i will cover here:
[x] Inject Dll in remtote process using CreateRemoteThread API.
[x] Inject Dll in remtote process using SetWindowsHookExW API.
[x] Inject ShellCode in remtote process using CreateRemoteThread API.
[x] Inject ShellCode in remote process using QueueUserAPC API.
[x] Inject ShellCode in remote process using Early Bird Technique.
[x] Inject ShellCode in remote process using TLS CallBack Technique.
[x] Inject using Thread execution hijacking.
[x] Inject Dll in remtote process using Reflective DLL injection.
[x] inject using Process Hollowing.
[x] inject using Process Doppelganging.
[ ] inject using Atom Bombing.
[x] inject using Process Ghosting.
[x] inject and persist using Image File Execution Options.
[x] inject using using AppInit_DLLs Registry.
[x] inject using using AppCertDlls Registry.
https://github.com/MahmoudZohdy/Process-Injection-Techniques/tree/main #malware_dev

Mitre : Process injection Sub-techniques(12) https://attack.mitre.org/techniques/T1055/ #malware_dev

us-19-Kotler-Process-Injection-Techniques-Gotta-Catch-Them-All.pdf

#meme
#meme

Horse Shell analysis (TP-Link routers malware by chinese APT Camaro Dragon) Credits @_CPResearch_ buff.ly/42WZ8zW #malware ,
Horse Shell analysis (TP-Link routers malware by chinese APT Camaro Dragon) Credits @_CPResearch_ buff.ly/42WZ8zW #malware , #IoT ,

New PoolParty Process Injection Techniques Outsmart Top EDR Solutions thehackernews.com/2023/12/ne… #EDR , #process_injection
New PoolParty Process Injection Techniques Outsmart Top EDR Solutions thehackernews.com/2023/12/ne… #EDR , #process_injection

The path from a C project and assembler to shellcode https://www.orderofsixangles.com/translations/2021/06/12/shellcoding.html #shellcode

Writing shellcode for Windows in assembler https://habr.com/en/articles/522966/ #shellcode

Writing shellcode for Windows in assembler https://habr.com/en/articles/522966/ #shellcode

17065-manual-shellcode.pdf

Shellcoding for Linux and Windows Tutorial https://www.vividmachines.com/shellcode/shellcode.html

How to Write Shellcode for Shellcode Injection and Simplify Assembly Code Development https://medium.com/@muchiemma/how-to-write-shellcode-for-shellcode-injection-and-simplify-assembly-code-development-703c3f214c46 #malware_dev #shellcode

How to Write Shellcode for Shellcode Injection and Simplify Assembly Code Development https://medium.com/@muchiemma/how-to-write-shellcode-for-shellcode-injection-and-simplify-assembly-code-development-703c3f214c46 #malware_dev #shellcode

Repost from Zer0Day Lab
#BlackHat Europe 2023: "A Technical Analysis of a HeadCrabMalware and the Mind Behind It", 2023.