corpus.blog
41,554 blogs · 4,981,167 posts Claim your blog
Record · corpus.blog/posts/01a0873f-d568-7210-bd31-3198f14ad89b

Abusing Windows’ Implementation of Fork() for Stealthy Memory Operations

billdemirkapi.me · published 26 November 2021

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at billdemirkapi.me Wayback capture
0blogs citing
First cited
—
Most recent
—
Rank this month
not ranked
External links
15
Words captured
2,658

Cited by

No blog we hold has cited this post yet.

Links from this post

Link
Host
https://twitter.com/diversenok_zero/status/1463844989612568581
twitter.com
https://docs.microsoft.com/en-us/windows/win32/api/processthreadsapi/nf-processthreadsapi-openprocess
docs.microsoft.com
https://docs.microsoft.com/en-us/windows-hardware/drivers/ddi/wdm/nf-wdm-obregistercallbacks
docs.microsoft.com
https://docs.microsoft.com/en-us/windows/win32/api/processthreadsapi/nf-processthreadsapi-initializeprocthreadattributelist
docs.microsoft.com
https://docs.microsoft.com/en-us/windows/win32/api/processthreadsapi/nf-processthreadsapi-updateprocthreadattribute
docs.microsoft.com
https://docs.microsoft.com/en-us/windows/win32/api/processthreadsapi/nf-processthreadsapi-createprocessa
docs.microsoft.com
https://gist.github.com/Cr4sh/126d844c28a7fbfd25c6
gist.github.com
https://github.com/Microwave89/createuserprocess/
github.com
https://www.microsoft.com/en-us/research/publication/a-fork-in-the-road/
microsoft.com
https://github.com/gentilkiwi/mimikatz
github.com
https://docs.microsoft.com/en-us/windows/win32/api/minidumpapiset/nf-minidumpapiset-minidumpwritedump
docs.microsoft.com
https://github.com/D4stiny/ForkPlayground
github.com
https://twitter.com/diversenok_zero/status/1463844989612568581?ref_src=twsrc%5Etfw
twitter.com
https://twitter.com/diversenok_zero
twitter.com
https://gist.github.com/D4stiny/31c0523b5bb824085ceb809ed214f193/revisions
gist.github.com