PorLaCola25/PPID-Spoofing
POC of PPID spoofing using NtCreateUserProcess with syscalls to create a suspended process and performing process injection by overwritting ntdll:LdrInitializeThunk with shellcode.
C
Stargazers
- askme765cs
- astreuw@inferigang
- ceramicskate0Looking for new opportunities
- chann-tx
- ChrisLinn@Fluidex & @ZenGo-X
- cn6u9
- d0gkiller87de_dust2
- EspressoCake
- gregDron
- hackmiss
- hugmyndakassiÍsland
- IC3-CR3AM
- int3hhCRYPTOCUBE
- invokethreatguyToronto
- JamVayne
- JaxiiUnited States
- jiaqp
- luxcupitor
- mumu0215
- Onils
- Phuong39
- rbwdennyRBW
- RE-EXPOC
- redpurpleblue
- reveng007Seed
- semihartan
- sh4hin
- SolomonSklash
- steepcloud
- timwhitez@bytedance
- tingtho
- user23333
- Valerian7
- void52
- ZaronZPoland
- zmkehLondon, UK