LloydLabs / ntqueueapcthreadex-ntdll-gadget-injection

This novel way of using NtQueueApcThreadEx by abusing the ApcRoutine and SystemArgument[0-3] parameters by passing a random pop r32; ret gadget can be used for stealthy code injection.

Home Page:https://blog.syscall.party

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

LloydLabs/ntqueueapcthreadex-ntdll-gadget-injection Stargazers