Explore tweets tagged as #WaitingThreadHijacking
My new blog for Check Point Research - check it out! 💙 // #ProcessInjection : #WaitingThreadHijacking.
Thread Execution Hijacking is one of the well-known methods that can be used to run implanted code. In this blog we introduce a new injection method, that is based on this classic technique, but much stealthier - Waiting Thread Hijacking. Read More :
13
133
436
My malware development works and practices for [April 2025]: . * Waiting thread hijacking: * My Custom Shellcode: * ApiHooking using Trampoline: * Fixed Direct Syscall Issues: *
9
121
607
#WaitingThreadHijacking + #ContextJail == Waitless Thread Hijacking. Algo:.1. Jail any running remote tgt thread with 99 jailers. 2. Read tgt stack. 3. RtlVirtualUnwind tgt thread to find ret address stack slot. 4. Apply ret address hijack and unjail tgt.
My new blog for Check Point Research - check it out! 💙 // #ProcessInjection : #WaitingThreadHijacking.
0
2
14
Written waiting thread hijacking in rust. special thanks to @hasherezade for the awesome PoC.
4
35
170
1. Pause thread midway in exploit races (even ⓪). 2. Or block entire CPU core. Kernel APCs run at APC_LEVEL (🤯), so thread scheduling kinda disabled (think priority == ∞). 3. Or build upon @hasherezade's work & enhance #WaitingThreadHijacking — making it, in fact, Waitless.
1
1
12
Waiting Thread Hijacking: A Stealthier Version of Thread Execution Hijacking. #Infosec #Security #Cybersecurity #CeptBiro #WaitingThreadHijacking #StealthierVersion #ThreadExecutionHijacking.
0
0
0
Waiting Thread Hijacking: A Stealthier Version of Thread Execution Hijacking. #Infosec #Security #Cybersecurity #CeptBiro #WaitingThreadHijacking #StealthierVersion #ThreadExecutionHijacking.
0
0
0