Anvilpoint CyberOps - Hacker for Hire ◆ Cheap KYC Verifications & Openups ◆ Spoof Call and Spoof SMS set any caller ◆ ProxiesFood: Unlimited Residential Proxy ◆
Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact
Hack Forums Tech Coding Software Development › [C] Process hollowing in Win 10

New Reply 
C 

Process hollowing in Win 10
invisible_hack2
invisible_hack2 Offline
[n00b@HF:]
*
Registered
Posts:
40
Threads:
12
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
May 22, 2020 03:48 PM
I would like to know if this technique is still valid in windows 10 and if it continues to hide the suspended process since now you can see all the suspended processes in windows 10.

which is a good technique to hide the process apart from process hollowing and injection dll?

thank you
Sinistros
Sinistros Offline
Developer
**
HF l33t
Posts:
214
Threads:
1
Credibility:
000
Popularity:
115
βytes:
β 0
Game XP:
0
May 23, 2020 08:42 AM (This post was last modified: May 23, 2020 08:42 AM by Sinistros.)
(May 22, 2020 03:48 PM)invisible_hack2 Wrote:  I would like to know if this technique is still valid in windows 10 and if it continues to hide the suspended process since now you can see all the suspended processes in windows 10.

which is a good technique to hide the process apart from process hollowing and injection dll?

thank you

Hello, i guess the best dll injection is manual mapping, it is the most hidden technique.
Chameleon
Chameleon Offline
[user@HF:]
*
Registered
Posts:
201
Threads:
5
Credibility:
800
Popularity:
6
βytes:
β 0
Game XP:
0
May 23, 2020 10:00 AM
(May 23, 2020 08:42 AM)Sinistros Wrote:  Hello, i guess the best dll injection is manual mapping, it is the most hidden technique.

Oh darn, i was just about to say that haha.. good one brother
Jean-Jacques Rousseau
Jean-Jacques Rousseau Offline
[closed@HF:]
Posts:
431
Threads:
15
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
0
May 24, 2020 05:56 AM
(May 23, 2020 08:42 AM)Sinistros Wrote:  Hello, i guess the best dll injection is manual mapping, it is the most hidden technique.

Depends on how youre doing it.

OP: what do you mean by suspended process? It i resumed once mapping is done.
invisible_hack2
invisible_hack2 Offline
[n00b@HF:]
*
Registered
Posts:
40
Threads:
12
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
May 27, 2020 11:26 AM
(May 24, 2020 05:56 AM)Jean-Jacques Rousseau Wrote:  Depends on how youre doing it.

OP: what do you mean by suspended process? It i resumed once mapping is done.

Correct, it's resumed, i'm not tested this technique yet, i don't know if it works in win 10
Jean-Jacques Rousseau
Jean-Jacques Rousseau Offline
[closed@HF:]
Posts:
431
Threads:
15
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
0
May 27, 2020 12:06 PM
(May 27, 2020 11:26 AM)invisible_hack2 Wrote:  Correct, it's resumed, i'm not tested this technique yet, i don't know if it works in win 10

Of course it works. It is unpatchable.
Zanthir
Zanthir Offline
[n00b@HF:]
*
Registered
Posts:
19
Threads:
0
Credibility:
100
Popularity:
0
βytes:
β 2
Game XP:
1
May 27, 2020 04:15 PM
Ive tested it works fine !
SIM-3466371
SIM-3466371 Offline
[n00b@HF:]
*
Registered
Posts:
97
Threads:
38
Credibility:
000
Popularity:
1
βytes:
β 0
Game XP:
0
Jun 19, 2020 03:37 PM
(May 22, 2020 03:48 PM)invisible_hack2 Wrote:  I would like to know if this technique is still valid in windows 10 and if it continues to hide the suspended process since now you can see all the suspended processes in windows 10.

which is a good technique to hide the process apart from process hollowing and injection dll?

thank you

Yes, it's still working in all windows versions.

Because this technique uses api calls and it's not a vulnerability.

If you have equal or more privileges than target process, why not??

Most AV will detect it, specially api calls like Get/setThreadContext, createremotethread, WriteMemory
Next Oldest | Next Newest
New Reply 


Possibly Related Threads...
Thread / Author Replies Views Last Post
[C#] by SmokyMay 4, 2024 07:40 AM 4 367 May 4, 2024 07:40 AM
Last Post: COCKBOT
[Python] by PhantomBladeJul 11, 2020 05:25 AM 3 277 Jul 11, 2020 05:25 AM
Last Post: omboml
[C] by chrizatorJul 22, 2018 05:09 AM 4 229 Jul 22, 2018 05:09 AM
Last Post: Anzee