Monday, November 14, 2011

Thread Injection

Today I suggest this short but intensive ( :D ) reading. It's a simple tutorial for thread injection in x86 systems. I believe it is useful for everybody likes thread hijacking . It shortly describes 7 simple steps to attack a generic running process  by showing code examples to make the reading even faster.
Here the seven main steps:
  1. Detect the target process
  2. Identify the main thread
  3. Suspend the main thread
  4. Obtain the thread content
  5. Create the "code-cave" (the code to be injected)
  6. Spoof the %IP and hijacking control flow
  7. Resume the thread, continue execution and free the memory

No comments: