ThreadBoat - Program Uses Thread Execution Hijacking To Inject Native Shell-code Into A Standard Win32 Application
http://www.kitploit.com/2021/11/threadboat-program-uses-thread.html

Program uses Thread Hijacking (https://www.kitploit.com/search/label/Hijacking) to Inject Native Shellcode into a Standard Win32 (https://www.kitploit.com/search/label/Win32) Application.
About
I developed this small project to continue my experiences of different code injection (https://www.kitploit.com/search/label/Injection) methods and to allow RedTeam security professionals to utilize this method as a unique way to perform software penetration testing. With Thread hijacking, it allows the hijacker.exe program to susepend a thread within the target.exe program allowing us to write shellcode to that target thread, and later be executed (via; WriteProcessMemory(), SetThreadContext(), ResumeThread(), CreateThread()).
Example GIF (Credits To Endgame)

Usage
int main()
{
System sys;
Interceptor incp;
Exception exp;

sys.returnVersionState();
if (sys.returnPrivilegeEscalationState())
{
std::cout << "Token Privileges Adjusted\n";
}

if (DWORD m_procId = incp.FindWin32ProcessId((PCHAR)m_win32ProcessName))
{
incp.ExecuteWin32Shellcode(m_procId);
}

system("PAUSE");
return 0;
}
For Further Information On Thread Execution Hijacking

Click On The Link (https://www.kitploit.com/search/label/Link) Below
https://capec.mitre.org/data/definitions/30.html
Environment
Windows Vista+Visual C++
Libs
Winapiuser32.dllkernel32.dllntdll.dll
Ethical Notice
This code was simply written to demonstrate an overlooked method to inject shellcode or a DLL into a Win32 program. This code is not to be used for malicous purposes. The author, Josh Schiavone, is not liable for misuse of this software. May God bless you all.

Download ThreadBoat (https://github.com/MandConsultingGroup/ThreadBoat)

Hacking on Medium
Buy 6cladba, 6cl-adbb-b, 5cladba, 5cl-adb, 5fadb, 4fadb, 2fdck, Jwh-018, 7a-19, 7add, 7abb

https://cdn-images-1.medium.com/max/800/1*i_13ishETMW2MLj_0trdlQ.jpeg
Buy 6cladba, 6cl-adbb-b, 5cladba, 5cl-adb, 5fadb, 4fadb, 2fdck, Jwh-018, 7a-19, 7add, 7abb
BUY 5CLADBA, 5CL-ADB A, 6CLADBA ,6CL-ADB A …

Continue reading on Medium »

Hacking on Medium
Know Spam, Phishing, Spoofing, and Pharming

https://cdn-images-1.medium.com/max/1280/1*79y2H1tufweFjnGIiqVD5Q.png
Scams are illegal. They can be classified as frauds or confidence tricks, and they are often based on some type of social engineering…

Continue reading on Medium »

Hacking on Medium
The Power of Pair Hacking

https://cdn-images-1.medium.com/max/1920/1*U5JvrDdDBi1X8d3vsrgqUQ.jpeg
For years now at Cyrex, we’ve implemented the pair hacking method for our penetration testing. It’s a staple in our success as a…

Continue reading on Medium »

Hacking on Medium
Types of viruses, their harm and ways to prevent them

https://cdn-images-1.medium.com/max/1280/1*25QMNP4HhghW0ns6njzRTA.jpeg
Research on types of viruses, their damage and ways to prevent them.

Continue reading on Medium »

Explaining Basic DOM Clobbering And The <a> Tag

Or if you’re stuck on PortSwigger’s DOM Clobbering labsContinue reading on Medium »
Read more...

KitPloit - PenTest Tools!
ThreadBoat - Program Uses Thread Execution Hijacking To Inject Native Shell-code Into A Standard Win32 Application

https://blogger.googleusercontent.com/img/a/AVvXsEh4HOdyv0K9bz9hRZQJkXMEVsV5z5TPysk-8EKTuNc8xmzXkgioL8eecxXvn_Mwr-xL_qJ2HAkBIknN0puXX1dOhoV6Ib2iDNpXajGa7RlHJIpeg4JpcXiw2P25aBijix6gbjdRLIQSSGlyo2UHBZJppmPEinn9IBE_30_5K1_VuD-E-u5HqeJEHWB_0w=w640-h368
Program uses Thread Hijacking to Inject Native Shellcode into a Standard Win32 Application.

About

I developed this small project to continue my experiences of different code injection methods and to allow RedTeam security professionals to utilize this method as a unique way to perform software penetration testing. With Thread hijacking, it allows the hijacker.exe program to susepend a thread within the target.exe program allowing us to write shellcode to that target thread, and later be executed (via; WriteProcessMemory(), SetThreadContext(), ResumeThread(), CreateThread()).
Example GIF (Credits To Endgame)
https://blogger.googleusercontent.com/img/a/AVvXsEh4HOdyv0K9bz9hRZQJkXMEVsV5z5TPysk-8EKTuNc8xmzXkgioL8eecxXvn_Mwr-xL_qJ2HAkBIknN0puXX1dOhoV6Ib2iDNpXajGa7RlHJIpeg4JpcXiw2P25aBijix6gbjdRLIQSSGlyo2UHBZJppmPEinn9IBE_30_5K1_VuD-E-u5HqeJEHWB_0w=w640-h368
Usage

int main()
{
System sys;
Interceptor incp;
Exception exp;

sys.returnVersionState();
if (sys.returnPrivilegeEscalationState())
{
std::cout <<
}

if (DWORD m_procId = incp.FindWin32ProcessId((PCHAR)m_win32ProcessName))
{
incp.ExecuteWin32Shellcode(m_procId);
}

system("PAUSE");
return 0;
}

For Further Information On Thread Execution Hijacking

Click On The Link Below

https://capec.mitre.org/data/definitions/30.html

Environment

* Windows Vista+
* Visual C++

Libs

*
Winapi

* user32.dll
* kernel32.dll

*
ntdll.dll
Ethical Notice

This code was simply written to demonstrate an overlooked method to inject shellcode or a DLL into a Win32 program. This code is not to be used for malicous purposes. The author, Josh Schiavone, is not liable for misuse of this software. May God bless you all.
Download ThreadBoat

___________________________
@hacking_Attack
@Hacking_Video

Explaining Basic DOM Clobbering And The Tag
https://medium.com/@lai.glorison/explaining-basic-dom-clobbering-and-the-a-tag-ef10405464a8?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Or if you’re stuck on PortSwigger’s DOM Clobbering labsContinue reading on Medium » (https://medium.com/@lai.glorison/explaining-basic-dom-clobbering-and-the-a-tag-ef10405464a8?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Finding of Clickjacking bug
https://mukibas37.medium.com/finding-of-clickjacking-bug-f086bcf5f2fd?source=rss------bug_bounty-5

Bug Bounty WriteupContinue reading on Medium » (https://mukibas37.medium.com/finding-of-clickjacking-bug-f086bcf5f2fd?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Responder - LLMNR packets not interpreted on ESXI Virtual Machine
https://www.reddit.com/r/Pentesting/comments/qzk3cn/responder_llmnr_packets_not_interpreted_on_esxi/

___________________________
@hacking_Attack
@Hacking_Video