windows - tbhaxor's Blog

tbhaxor's Blog

Sign in Subscribe

windows

A collection of 11 posts

Active Directory Pentesting from Linux

active-directory

Active Directory Pentesting from Linux

Discover the fundamentals of pentesting Active Directory Domain Services on Linux with a thorough tour of Altered Security's LinuxAD lab.

Process Injection using QueueUserAPC Technique in Windows

Process Injection using QueueUserAPC Technique in Windows

You will learn the fundamentals of user mode asynchronous procedure calls in this post, as well as how to use them to inject shellcode into a remote process thread to obtain a reverse shell.

Process Injection using CreateRemoteThread API

Process Injection using CreateRemoteThread API

CreateRemoteThread is the oldest method of process injection, and it is easily detectable. However, this establishes the foundations for process injection and code execution. This blog post will provide you with a thorough and practical explanation of how it works.

Reading and Writing into Process's Memory

Reading and Writing into Process's Memory

Get the basic understanding on the remote process memory read and write all by windows 32 API and create your own game hacks.

Dump Information for Process using GetTokenInformation

Dump Information for Process using GetTokenInformation

In this post, you will get a very thorough step-by-step walkthrough on building your own process token dumper in the c++ which will help you in knowing your target better before launching another post exploitation attack.

Windows Process Listing using NTQuerySystemInformation

Windows Process Listing using NTQuerySystemInformation

Get acquainted with the undocumented low-level yet powerful APIs from winternls and how to use the NtQuerySystemInformation function to get a list of all the processes running in the system

Windows Process Listing Using PSApi

Windows Process Listing Using PSApi

Get a detailed walkthrough on process listing via PSApi. You will also learn about its pros-n-cons and the new set of functions from the PS Api suite related to module enumeration.

Windows Process Listing using ToolHelp32 API

Windows Process Listing using ToolHelp32 API

Get a detailed walk-through on the code of process listing using ToolHelp32 API from scratch. You will also learn to enumerate the threads and modules for each process and will know about its advantages and challenges

Windows Process Listing Using WTS API – Part 2

Windows Process Listing Using WTS API – Part 2

In this post, you will learn how to gracefully enable SeDebugPrivilege and automatically launch the process using ShellExecuteExA with administrator privileges. This is in continuation to part 1 of windows process listing using wts api.

Windows Process Listing Using WTS API – Part 1

Windows Process Listing Using WTS API – Part 1

In this detailed walkthrough of process listing using WTS API, you will learn the importance of the process listing and enumeration of anti-malware agents and will get your hands dirty with the source code

Loading DLLs using C++ in Windows

Loading DLLs using C++ in Windows

This standalone tutorial will guide you through writing your own DLL library from scratch and loading it into C++ and calling the exported functions in a separate project.