corpus.blog
42,593 blogs · 5,361,753 posts Claim your blog
Record · corpus.blog/posts/01a0821a-f74f-7216-9ec5-04f4e51f4bfe

No Alloc, No Problem: Leveraging Program Entry Points for Process Injection

Bohops · published 9 June 2023

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at bohops.com Wayback capture
0blogs citing
First cited
—
Most recent
—
Rank this month
not ranked
External links
15
Words captured
1,339

Cited by

No blog we hold has cited this post yet.

Links from this post

Link
Host
https://attack.mitre.org/techniques/T1055/
attack.mitre.org
https://www.ired.team/
ired.team
https://www.ired.team/offensive-security/code-injection-process-injection/addressofentrypoint-code-injection-without-virtualallocex-rwx
ired.team
https://twitter.com/spotheplanet
twitter.com
https://learn.microsoft.com/en-us/windows/win32/debug/pe-format
learn.microsoft.com
https://axcheron.github.io/pe-format-manipulation-with-pefile/
axcheron.github.io
https://learn.microsoft.com/en-us/windows/win32/api/winternl/nf-winternl-ntqueryinformationprocess
learn.microsoft.com
https://github.com/timwhitez/AddressOfEntryPoint-injection/tree/main
github.com
https://learn.microsoft.com/en-us/windows/win32/api/winternl/nf-winternl-ntqueryinformationthread
learn.microsoft.com
https://github.com/mirror/processhacker/blob/master/2.x/trunk/phlib/include/ntpsapi.h
github.com
https://learn.microsoft.com/en-us/windows/win32/api/processthreadsapi/nf-processthreadsapi-createprocessa
learn.microsoft.com
https://learn.microsoft.com/en-us/windows/win32/api/processthreadsapi/ns-processthreadsapi-process_information
learn.microsoft.com
https://www.geoffchappell.com/studies/windows/km/ntoskrnl/api/ps/psquery/class.htm
geoffchappell.com
https://x64dbg.com/
x64dbg.com
https://paper.bobylive.com/Meeting_Papers/BlackHat/USA-2015/us-15-Yason-Understanding-The-Attack-Surface-And-Attack-Resilience-Of-Project-Spartans-New-EdgeHTML-Rendering-Engine-wp.pdf
paper.bobylive.com