corpus.blog
41554 blogs · 4,417,066 posts Claim your blog
Record · corpus.blog/posts/01a087a7-f98f-73f6-93cd-e0e4fb352d85

Windows Process Injection: Command Line and Environment Variables

modexp.wordpress.com · published 31 July 2020

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at modexp.wordpress.com Wayback capture
0blogs citing
First cited
—
Most recent
—
Rank this month
not ranked
Links from this post
14
Words captured
6,783

Cited by

No blog we hold has cited this post yet.

Links from this post

Link
Host
https://twitter.com/Hexacorn
twitter.com
https://docs.microsoft.com/en-us/windows/win32/api/memoryapi/nf-memoryapi-virtualallocex
docs.microsoft.com
https://docs.microsoft.com/en-us/windows/win32/api/memoryapi/nf-memoryapi-writeprocessmemory
docs.microsoft.com
https://www.hexacorn.com/blog/2019/05/18/inserting-data-into-other-processes-address-space/
hexacorn.com
https://docs.microsoft.com/en-us/windows/win32/api/processthreadsapi/nf-processthreadsapi-createprocessw
docs.microsoft.com
https://docs.microsoft.com/en-us/windows/win32/api/memoryapi/nf-memoryapi-virtualprotectex
docs.microsoft.com
https://www.hexacorn.com/blog/2019/04/23/wordwarper-new-code-injection-trick/
hexacorn.com
https://docs.microsoft.com/en-us/windows/win32/controls/em-setwordbreakproc
docs.microsoft.com
https://www.vergiliusproject.com/kernels/x64/Windows%20Vista%20%7C%202008/RTM/_RTL_USER_PROCESS_PARAMETERS
vergiliusproject.com
https://github.com/odzhan/injection/blob/master/cmdline/winexec1.asm
github.com
https://docs.microsoft.com/en-us/windows/win32/winmsg/wm-settext
docs.microsoft.com
https://docs.microsoft.com/en-us/windows/win32/api/winbase/nf-winbase-setenvironmentvariable
docs.microsoft.com
https://github.com/odzhan/injection/tree/master/cmdline
github.com
https://docs.microsoft.com/en-us/windows/win32/api/processthreadsapi/ns-processthreadsapi-startupinfow
docs.microsoft.com