→ كل المشاريع

ClassicThreadHijacking

بواسطة @AbdouRoumi

15

عن هذا المشروع

Local Thread Hijacking This project demonstrates how to perform local thread hijacking on a running process in Windows. It manipulates the current thread's context to change the instruction pointer and execute custom shellcode. Features Local Thread Hijacking: Modify the execution flow of a thread within the same process. Shellcode Injection: Inject custom shellcode into the current process and hijack the thread to execute it. Context Modification: Alter the thread’s context (including instruction pointer) to point to the injected code. Prerequisites Operating System: Windows Development Environment: Visual Studio Libraries: Windows API (kernel32, ntdll) Functions for memory and thread management How It Works Shellcode Injection: Memory is allocated within the same process using VirtualAlloc and filled with shellcode. Get Thread Context: The thread's context is captured using GetThreadContext. Hijack Thread: The instruction pointer (RIP on x64) is changed to the address of the injected shellcode, and the thread is resumed with the modified context. Usage Clone the repository: Open the project in Visual Studio.

من ملف README الخاص بالمشروع على GitHub

النجوم
15
التفريعات
0
الرخصة
MIT
آخر تحديث
21/09/2024

أضف هذه الشارة إلى ملف README

أظهر أن مشروعك مُدرج على «صُنع في الجزائر».

Made in Algeria
[![Made in Algeria](https://www.madeinalgeria.dev/badge/classicthreadhijacking.svg)](https://www.madeinalgeria.dev/projects/classicthreadhijacking)

مشاريع ذات صلة