From 39a8f93c352b05423dee213178de544f0a692f46 Mon Sep 17 00:00:00 2001 From: Alex Davies Date: Wed, 4 Oct 2017 21:30:03 +0100 Subject: [PATCH] Update README.md --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index d3ab1dd..4d4c709 100644 --- a/README.md +++ b/README.md @@ -14,6 +14,6 @@ https://github.com/peterferrie/win-exec-calc-shellcode - thread-hijack.cs - This example suspends a thread within a running process, injects shellcode in the process and redirects execution of an existing thread to the shellcode. Once the shellcode is executed the thread will continue as before. -- apc-injection-any-process.cs - APC injection using QueueAPC into a remote process. This method relies on the threads within the process entering an alertable state. +- apc-injection-any-process.cs - APC injection using QueueAPC into a currently running remote process. This method relies on the threads within the process entering an alertable state. - apc-injection-new-process.cs - APC injection using QueueAPC into a newly created process. As the threads of a newly created process will be alertable its easier to trigger APC usage with this technique, although you will generate a new process.