Infiltr8: Red-Book

Infiltr8: Red-Book

Code & Process Injection

Loading .NET Reflective Assembly Loading .NET Assembly from Windows Script Hosting Process Hollowing WndProc Callback Shellcode Execution Fibers Shellcode Execution Vector Exception Handler Shellcode Execution NtQueueApcThread & NtTestAlert Shellcode Execution Thread Pool Callback Shellcode Execution Module Stomping Shellcode Injection Remote .NET Assembly Loading through WaaSRemediation DCOM Abuse DLL Injection CreateRemoteThread Injection Reflective DLL Injection NtMapViewOfSection Injection SetWindowHookEx Injection PoolParty MockingJay

Defense Evasion

Privilege Escalation

Credential Access

Lateral Movement

Red-TeamingExecution Code & Process Injection

Work in progress

This page is incomplete — content may be missing or unverified.

DLL Injection

Remote .NET Assembly Loading through WaaSRemediation DCOM Abuse

Previous Page

CreateRemoteThread Injection

Next Page