admin/andreisss-Remote-DLL-Injection-with-Timer-based-Shellcode-Execution
1
0
Fork 0
mirror of https://github.com/andreisss/Remote-DLL-Injection-with-Timer-based-Shellcode-Execution synced 2026-06-06 15:14:31 +00:00
Code Issues Packages Projects Releases Wiki Activity

Update README.md

Browse Source
This commit is contained in:
Andrea Bocchetti
2025-07-17 20:00:04 +02:00
committed by GitHub
parent 933550e195
commit 9265c00ffc
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
README.md
+1 -1
View File
@@ -8,7 +8,7 @@
## Overview
**Thread Pool Timer Process Injection** is a novel technique that leverages the Windows thread pool infrastructure to execute shellcode. By combining traditional DLL injection with the `CreateThreadpoolTimer` API, this method enables in-memory code execution through legitimate system-managed threads—potentially bypassing many modern detection mechanisms.
**Thread Pool Timer Process Injection** is a technique that leverages the Windows thread pool infrastructure to execute shellcode. By combining traditional DLL injection with the `CreateThreadpoolTimer` API, this method enables in-memory code execution through legitimate system-managed threads—potentially bypassing many modern detection mechanisms.
This approach introduces a stealthy execution vector that avoids classic API hooks such as `CreateRemoteThread`, `NtCreateThreadEx`, and APCs, making it highly attractive for red team operations and malware research.