ThreadBoat program uses Thread Hijacking to Inject Native Shellcode into a Standard Win32 Application. I developed this small project to continue my experiences of different code injection methods.
With Thread Hijacking, it allows the hijacker.exe program to susepend a thread within the target.exe program allowing us to write shellcode to a thread.
ThreadBoat Usage
int main()
{
System sys;
Interceptor incp;
Exception exp;
sys.returnVersionState();
if (sys.returnPrivilegeEscalationState())
{
std::cout << “Token Privileges Adjusted\n”;
}
if (DWORD m_procId = incp.FindWin32ProcessId((PCHAR)m_win32ProcessName))
{
incp.ExecuteWin32Shellcode(m_procId);
}
system(“PAUSE”);
return 0;
}
Also Read – Re-composer : Randomly Changes Win32/64 PE Files For ‘Safer’ Uploading To Malware & Sandbox Sites
Environment
OSINTk.o is a customized Kali Linux-based ISO image with pre-installed packages and scripts. The idea…
Cify is a Ruby-based WiFi hacking tool designed for penetration testers, security researchers, and network…
Cify is a Ruby-based WiFi hacking tool designed for penetration testers, security researchers, and network…
Dive into the world of cyber security with our exploration of VisionServices Multi-Tool. Developed in…
A collection of cool tools used by Mobile hackers. Happy hacking , Happy bug-hunting. The…
Dive into the world of cybersecurity with GoHTools, a comprehensive collection of hacking utilities crafted…