Remote Thread Execution in System Process using NtCreateThreadEx for Vista & Windows7 - www.SecurityXploded.com

Remote Thread Execution in System Process using NtCreateThreadEx for Vista & Windows7 - www.SecurityXploded.com

Windows provides API function called, CreateRemoteThread [Reference 2] which allows any process t...概要を表示 Windows provides API function called, CreateRemoteThread [Reference 2] which allows any process to execute thread in the context of remote process. This method has been mainly used to inject DLL into remote process, the technique popularly known as 'DLL Injection'. Especially malware programs exploited this mechanism to evade their detection by injecting their DLL into legitimate process's such as

• windows
• security