Reverse Shell Through DLL Injection

READ THE WHOLE ARTICLE

DLL Injection is a popular technique used by attackers to inject an executable file in order to perform a controlled code execution. Several  methods for preventing this has been developed by Operating System’s  creators, but (as we will see) without 100% success. The author presents two methods of a successful attack to windows 7 Ultimate OS that returns a reverse shell to the attacker. The first method uses the documented windows API function CreateRemoteThread and the second method uses the undocumented  funNtCreateThreadEx.

BY ANDREAS VENIERIS

 

Share and Enjoy:
  • Print
  • Digg
  • StumbleUpon
  • del.icio.us
  • Facebook
  • Yahoo! Buzz
  • Twitter
  • Google Bookmarks
  • PDF

Leave a Reply

You must be logged in to post a comment.

EN
PL
FR
DE


Software Press Sp. z o.o. Sp. Komandytowa 02-682 Warszawa, ul. Bokserska 1, NIP 9512279582, REGON 141804060, KRS: 0000327578

Advertisement