← All projects

ClassicThreadHijacking

by @AbdouRoumi

15

About this project

Local Thread Hijacking This project demonstrates how to perform local thread hijacking on a running process in Windows. It manipulates the current thread's context to change the instruction pointer and execute custom shellcode. Features Local Thread Hijacking: Modify the execution flow of a thread within the same process. Shellcode Injection: Inject custom shellcode into the current process and hijack the thread to execute it. Context Modification: Alter the thread’s context (including instruction pointer) to point to the injected code. Prerequisites Operating System: Windows Development Environment: Visual Studio Libraries: Windows API (kernel32, ntdll) Functions for memory and thread management How It Works Shellcode Injection: Memory is allocated within the same process using VirtualAlloc and filled with shellcode. Get Thread Context: The thread's context is captured using GetThreadContext. Hijack Thread: The instruction pointer (RIP on x64) is changed to the address of the injected shellcode, and the thread is resumed with the modified context. Usage Clone the repository: Open the project in Visual Studio.

From the project README on GitHub

Stars
15
Forks
0
License
MIT
Last push
21 Sept 2024

Add this badge to your README

Show that your project is listed on Made in Algeria.

Made in Algeria
[![Made in Algeria](https://www.madeinalgeria.dev/badge/classicthreadhijacking.svg)](https://www.madeinalgeria.dev/projects/classicthreadhijacking)

Related projects