Process Ventriloquism

Learn advanced techniques for process manipulation and control in Windows systems through this 58-minute conference talk from BSides Cleveland 2016. Explore Windows API methods for process control, library injection, hooking techniques, memory scraping, and Python interpreter injection. Gain insights into both offensive and defensive applications of process ventriloquism, with live demonstrations of IAT hooks, inline hooks, and memory scraping. Discover valuable resources for further learning and research in this comprehensive overview of process manipulation techniques.

Intro
About Me
Research Applications
Offensive Applications
Windows API Overview - Windows exposes numerous API methods for process control
Notable API Methods
Accessing A Process
Library Injection
Steps Overview
Generalized Code Injection
Hooking Methods
IAT Hook Demo
Inline Hook Example
Enumerating Memory (Scraping)
Memory Scraping Demo
Injecting A Python Interpreter
Injecting Python Demo
Further Reading & Resources