From 990779e6172baa8ce56d12e62ace7b454380e378 Mon Sep 17 00:00:00 2001 From: Usman Sikander <76246439+Offensive-Panda@users.noreply.github.com> Date: Tue, 3 Sep 2024 21:30:01 +0300 Subject: [PATCH] Update index.html --- index.html | 44 +++++++++++++++++++++++++++++++++++++++----- 1 file changed, 39 insertions(+), 5 deletions(-) diff --git a/index.html b/index.html index e163861..1b35fca 100644 --- a/index.html +++ b/index.html @@ -161,7 +161,9 @@ layout: default
APC Injection
Early Bird Injection
RWX Hunting Injection
-
Doppelganging Injection
+
Process Ghosting
+
Remote Thread Hijacking
+
Module Stomping
PEB Walk Injection
PEB Walk and Obfuscation Technique
NtCreateThread and Map View
@@ -268,12 +270,23 @@ layout: default -

PE 14 - Doppelganging Injection

- Technique Image +

PE 14 - Process Ghosting

+ Technique Image Windows Icon -

Exploits the Windows file system to inject code by manipulating legitimate processes and file operations.

+

It is a technique in which an attacker creates a file (malware), mark it for deletion (delete-pending state), copies/maps a malware into the memory (image section), close the handle (which deletes it from the disk), then create a process from the now-fileless section..

- + +

PE 15 - Module Stomping

+ Technique Image + Windows Icon +

Module Stomping is a stealthy technique to execute malicious code within a legitimate process by overwriting the memory of a loaded module (typically a DLL) without altering its disk image.

+
+ +

PE 16 - Remote Thread Hijacking

+ Technique Image + Windows Icon +

Remote Thread Hijacking is an advanced code injection technique to inject and execute malicious code within the context of another process by hijacking an existing thread.

+

PE 15 - PEB Walk Injection

@@ -340,6 +353,27 @@ layout: default +
+

References

+
+

Disclaimer

The content, techniques, and tools provided in this repository are intended solely for educational and research purposes within the cybersecurity community. I explicitly disclaim any responsibility for the misuse or unlawful use of the provided materials. Any actions taken based on the information are done so at the user's own risk.