Introduction

Process injection
THM Room: Abusing Windows Internals

What?

Process injection is an old technique used by malware.

Why?

  • Running without a process.

  • Placing user-mode hooks for a rootkit or formgrabber.

  • Bypassing antivirus/firewalls by injecting whitelisted processes.

How?