Repository navigation

waiting_thread_hijacking

Public

About

Waiting Thread Hijacking - injection by overwriting the return address of a waiting thread

research.checkpoint.com/2025/waiting-thread-hijacking/

processinjection redteam shellcode-injection shellcode-injector

267 stars

4 watching

Report repository

Name		Name	Last commit message	Last commit date
custom_shc		custom_shc
img		img
.appveyor.yml		.appveyor.yml
CMakeLists.txt		CMakeLists.txt
README.md		README.md
common.h		common.h
hijacking.cpp		hijacking.cpp
hijacking.h		hijacking.h
main.cpp		main.cpp
main_split.cpp		main_split.cpp
ntddk.h		ntddk.h
ntdll_api.h		ntdll_api.h
shellcode.h		shellcode.h
threads_util.cpp		threads_util.cpp
threads_util.h		threads_util.h

Repository files navigation

Waiting Thread Hijacking demo

Waiting Thread Hijacking - injection by overwriting the return address of a waiting thread.

Details: https://research.checkpoint.com/2025/waiting-thread-hijacking/

Demo

https://www.youtube.com/watch?v=CZIR4gq4jQ0

About

Waiting Thread Hijacking - injection by overwriting the return address of a waiting thread

research.checkpoint.com/2025/waiting-thread-hijacking/

processinjection redteam shellcode-injection shellcode-injector

267 stars

4 watching

Report repository

Releases

Packages

Contributors

Languages