Top Tweets for #WaitingThreadHijacking

about 1 year ago

#WaitingThreadHijacking + #ContextJail == Waitless Thread Hijacking. Algo: 1. Jail any running remote tgt thread with 99 jailers. 2. Read tgt stack. 3. RtlVirtualUnwind tgt thread to find ret address stack slot. 4. Apply ret address hijack and unjail tgt. https://t.co/0FMbOgZL3s

hasherezade

@hasherezade

about 1 year ago

My new blog for Check Point Research - check it out! 💙 // #ProcessInjection : #WaitingThreadHijacking

479

135

155

92K

sixtyvividtails @sixtyvividtails

about 1 year ago

1. Pause thread midway in exploit races (even ⓪). 2. Or block entire CPU core. Kernel APCs run at APC_LEVEL (🤯), so thread scheduling kinda disabled (think priority == ∞). 3. Or build upon @⁠hasherezade's work & enhance #WaitingThreadHijacking — making it, in fact, Waitless.

hasherezade

@hasherezade

about 1 year ago

My new blog for Check Point Research - check it out! 💙 // #ProcessInjection : #WaitingThreadHijacking

Check Point Research

@_CPResearch_

about 1 year ago

Thread Execution Hijacking is one of the well-known methods that can be used to run implanted code. In this blog we introduce a new injection method, that is based on this classic technique, but much stealthier - Waiting Thread Hijacking. Read More : https://t.co/ptdomYaAZG

266

109

139

104K

479

135

155

92K

Top Tweets for #WaitingThreadHijacking

Last Seen Hashtags on Sotwe

Trends for you

Most Popular Users