Process Ventriloquism
Offered By: YouTube
Course Description
Overview
Learn advanced techniques for process manipulation and control in Windows systems through this 58-minute conference talk from BSides Cleveland 2016. Explore Windows API methods for process control, library injection, hooking techniques, memory scraping, and Python interpreter injection. Gain insights into both offensive and defensive applications of process ventriloquism, with live demonstrations of IAT hooks, inline hooks, and memory scraping. Discover valuable resources for further learning and research in this comprehensive overview of process manipulation techniques.
Syllabus
Intro
About Me
Research Applications
Offensive Applications
Windows API Overview - Windows exposes numerous API methods for process control
Notable API Methods
Accessing A Process
Library Injection
Steps Overview
Generalized Code Injection
Hooking Methods
IAT Hook Demo
Inline Hook Example
Enumerating Memory (Scraping)
Memory Scraping Demo
Injecting A Python Interpreter
Injecting Python Demo
Further Reading & Resources
Related Courses
Computer SecurityStanford University via Coursera Cryptography II
Stanford University via Coursera Malicious Software and its Underground Economy: Two Sides to Every Story
University of London International Programmes via Coursera Building an Information Risk Management Toolkit
University of Washington via Coursera Introduction to Cybersecurity
National Cybersecurity Institute at Excelsior College via Canvas Network