Process injection in C++ using modified proxy functions to modify the call stack.
Using NtOpenProcess + NtAllocateVirtualMemoryEx + NtWriteVirtualMemory + NtCreateThreadEx.
References:
https://0xdarkvortex.dev/hiding-in-plainsight/
https://github.com/paranoidninja/Proxy-Function-Calls-For-ETwTI/tree/main
misiungs/Process-Injection-Custom-Call-Stacks-Cpp
Folders and files
| Name | Name | Last commit date | ||
|---|---|---|---|---|