Usermode APC Injection

		Exetools > General > Source Code
Usermode APC Injection

02-14-2017, 21:08

deroko

cr4zyserb

Join Date: Nov 2005

Posts: 217

Rept. Given: 13

Rept. Rcvd 30 Times in 14 Posts

Thanks Given: 7

Thanks Rcvd at 33 Times in 16 Posts

Well int this case code always works as prior to execution of NtContinue there is call for NtTestAlert which will trigger APCs, and also NtContinue how it is called by LdrInitializeThunk always has Alertable set to 1, so APCs will always get executed in this example.

__________________
http://accessroot.com

The Following 2 Users Say Thank You to deroko For This Useful Post:
niculaita (02-15-2017), sh3dow (02-17-2017)

« Previous Thread | Next Thread »

Thread Tools
Show Printable Version Email this Page
Display Modes
Switch to Linear Mode Switch to Hybrid Mode Threaded Mode

Posting Rules
You may not post new threads You may not post replies You may not post attachments You may not edit your posts BB code is On Smilies are On [IMG] code is On HTML code is On Forum Rules

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
DLL Injection	ldmd	Source Code	2	10-07-2024 21:44
[Delphi/Native API] ZwTerminateProcess without declaration from UserMode	Agmcz	Source Code	3	07-25-2018 04:48

All times are GMT +8. The time now is 11:51.