Faran-17 / EarlyBird-APC-Injection

Demonstration of Early Bird APC Injection - MITRE ID T1055.004

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

EarlyBird-APC-Injection

Demonstration of Early Bird APC Injection - MITRE ID T1055.004

Simple presentation of Early Bird APC Injection technique.

Read the blog related to it - Here

All the credits go to MalDev Academy and their authors for their excellent course.

Attack representation.

image

Video representaions of the attack.

earlybird_apc.mp4

Using x64Dbg.

earlybird_apc_rev.mp4

Note - Evasion was not kept in mind while creating this tool.

About

Demonstration of Early Bird APC Injection - MITRE ID T1055.004


Languages

Language:C 100.0%