The Pool Party You Will Never Forget: New Process Injection Techniques Using Windows Thread Pools

Автор: Black Hat

Загружено: 2024-04-01

Просмотров: 4105

Описание:

...In this talk, we will delve into the internals of the Windows user-mode thread pool, a component that seems to have been overlooked by security researchers in the past. Our exploration begins with an introduction to the thread pool architecture, its work item queuing mechanism, and the execution process managed by the scheduler....

By: Alon Leviev

Full Abstract and Presentation Materials:
https://www.blackhat.com/eu-23/briefi...

The Pool Party You Will Never Forget: New Process Injection Techniques Using Windows Thread Pools

Доступные форматы для скачивания:

Скачать видео mp4

Информация по загрузке:

Скачать аудио mp3

Похожие видео

A Decade After Stuxnet: How Siemens S7 is Still an Attacker's Heaven

A Decade After Stuxnet: How Siemens S7 is Still an Attacker's Heaven

Through the Looking Glass: How Open Source Projects See Vulnerability Disclosure

Through the Looking Glass: How Open Source Projects See Vulnerability Disclosure

You Can Run, but You Can't Hide - Finding the Footprints of Hidden Shellcode

You Can Run, but You Can't Hide - Finding the Footprints of Hidden Shellcode

Practical LLM Security: Takeaways From a Year in the Trenches

Practical LLM Security: Takeaways From a Year in the Trenches

Это спасет, когда заблокируют ВЕСЬ ИНТЕРНЕТ!

Это спасет, когда заблокируют ВЕСЬ ИНТЕРНЕТ!

BlueHat IL 2023 — Джеймс Форшоу — Аутентификация Windows

BlueHat IL 2023 — Джеймс Форшоу — Аутентификация Windows

Something Rotten in the State of Data Centers

Something Rotten in the State of Data Centers

Windows Internals

Windows Internals

Dirty Vanity: A New Approach to Code Injection & EDR Bypass

Dirty Vanity: A New Approach to Code Injection & EDR Bypass

DEF CON 32 - Windows Downdate: Downgrade Attacks Using Windows Updates - Alon Leviev

DEF CON 32 - Windows Downdate: Downgrade Attacks Using Windows Updates - Alon Leviev

Process Injection Techniques - Gotta Catch Them All

Process Injection Techniques - Gotta Catch Them All

Compromising LLMs: The Advent of AI Malware

Compromising LLMs: The Advent of AI Malware

CrikeyCon 2019 - Christopher Vella - Reversing & bypassing EDRs

CrikeyCon 2019 - Christopher Vella - Reversing & bypassing EDRs

Сисадмины больше не нужны? Gemini настраивает Linux сервер и устанавливает cтек N8N. ЭТО ЗАКОННО?

Сисадмины больше не нужны? Gemini настраивает Linux сервер и устанавливает cтек N8N. ЭТО ЗАКОННО?

The Dark Side of EDR: Repurpose EDR as an Offensive Tool

The Dark Side of EDR: Repurpose EDR as an Offensive Tool

Malware Development: Process Injection

Malware Development: Process Injection

Windows Internals Crash Course

Windows Internals Crash Course

#Hacktivity2022 // Practical EDR Bypass Methods in 2022 by István Tóth

#Hacktivity2022 // Practical EDR Bypass Methods in 2022 by István Tóth

DEF CON 32 - Listen to the Whispers: Web Timing Attacks that Actually Work - James Kettle

DEF CON 32 - Listen to the Whispers: Web Timing Attacks that Actually Work - James Kettle

Руководство для начинающих по хранилищу BLOB-объектов Azure

Руководство для начинающих по хранилищу BLOB-объектов Azure