AlphaUncommon
LloydLabs/ntqueueapcthreadex-ntdll-gadget-injection
This novel way of using NtQueueApcThreadEx by abusing the ApcRoutine and SystemArgument[0-3] parameters by passing a random pop r32; ret gadget can be used for stealthy code injection.
- Owner
- LloydLabs (personal account)
- Stars
- Stars: 268
- Forks
- Forks: 34
- Language
- C
- License
- MIT
- Created
- 2023
- Topics
- process-injectionshellcodeshellcode-injection
- Tier
- Alpha (250 to 699 ★) What this tier means
More repos by LloydLabs
All 7 repos by LloydLabs- LloydLabs/delete-self-pocStars: 615CAlpha
- LloydLabs/wsb-detectStars: 373CAlpha
- LloydLabs/Windows-API-HashingStars: 240CPrototype
- LloydLabs/shellcode-plain-sightStars: 209CPrototype
- LloydLabs/elf-stringsStars: 140GoPrototype
- LloydLabs/dearg-thread-ipc-stealthStars: 116CPrototype
Nearby in C
All C repos- 1ay1/neowallStars: 268CAlpha
- CroqueMr/libreelec-x86-DVStars: 268CAlpha
- carafe-nx/carafeStars: 268CAlpha
- tuffy/python-audio-toolsStars: 268CAlpha
- GHamrouni/RecommenderStars: 268CAlpha
- andrewrk/waveformStars: 268CAlpha