About this project
Local Thread Hijacking This project demonstrates how to perform local thread hijacking on a running process in Windows. It manipulates the current thread's context to change the instruction pointer and execute custom shellcode. Features Local Thread Hijacking: Modify the execution flow of a thread within the same process. Shellcode Injection: Inject custom shellcode into the current process and hijack the thread to execute it. Context Modification: Alter the thread’s context (including instruction pointer) to point to the injected code. Prerequisites Operating System: Windows Development Environment: Visual Studio Libraries: Windows API (kernel32, ntdll) Functions for memory and thread management How It Works Shellcode Injection: Memory is allocated within the same process using VirtualAlloc and filled with shellcode. Get Thread Context: The thread's context is captured using GetThreadContext. Hijack Thread: The instruction pointer (RIP on x64) is changed to the address of the injected shellcode, and the thread is resumed with the modified context. Usage Clone the repository: Open the project in Visual Studio.
From the project README on
GitHub
- Stars
- 15
- Forks
- 0
- License
- MIT
- Last push
- 21 Sept 2024
Add this badge to your README
Show that your project is listed on Made in Algeria.
[](https://www.madeinalgeria.dev/projects/classicthreadhijacking)