Code & Process Injection

CreateRemoteThread Shellcode Injection

DLL Injection

Reflective DLL Injection

Shellcode Reflective DLL Injection

Process Doppelganging

Loading and Executing Shellcode From PE Resources

Process Hollowing and Portable Executable Relocations

APC Queue Code Injection

Early Bird APC Queue Code Injection

Shellcode Execution in a Local Process with QueueUserAPC and NtTestAlert

Shellcode Execution through Fibers

Shellcode Execution via CreateThreadpoolWait

Local Shellcode Execution without Windows APIs

Injecting to Remote Process via Thread Hijacking

SetWindowHookEx Code Injection

Finding Kernel32 Base and Function Addresses in Shellcode

Executing Shellcode with Inline Assembly in C/C++

Writing Custom Shellcode Encoders and Decoders

Backdooring PE Files with Shellcode

NtCreateSection + NtMapViewOfSection Code Injection

AddressOfEntryPoint Code Injection without VirtualAllocEx RWX

Module Stomping for Shellcode Injection

PE Injection: Executing PEs inside Remote Processes

API Monitoring and Hooking for Offensive Tooling

Windows API Hooking

Import Adress Table (IAT) Hooking

DLL Injection via a Custom .NET Garbage Collector

Writing and Compiling Shellcode in C

Injecting .NET Assembly to an Unmanaged Process

Binary Exploitation