隠者 Inja Security
隠者 Inja Security
  • Home
  • ~$ whoami

Red Team

Defense Evasion

Leveraging Process Injection for AV Evasion

Introduction This blog post aims on showcasing a technique for Windows local payload execution, in addition to evading Antivirus solutions. The What and Why Process Injection has been around for many years, however, it is still heavily used by APT groups and therefore for Adversary Simulation. Adversaries may inject code Read more…

By Matheus Boschetti, 2 years ago
Certification Review

Pentester Academy Certified Red Team Professional (CRTP)

Having bought INE’s premium plan, I have access to the Attacking and Defending Active Directory course. After passing the OSCP, my plan was to move further into Red Teaming, and CRTP seemed to be a good fit for the first step. The course is only 14 hours long, however those are Read more…

By Matheus Boschetti, 3 yearsOctober 9, 2022 ago

Recent Posts

  • CVE-2024-29320: SQL Injection in Wallos
  • CVE-2024-27613: Arbitrary File Manipulation in Numbas
  • Bypassing PowerShell CLM with Custom Runspaces
  • Striking Blue: Picking Digital Lockers
  • Leveraging Process Injection for AV Evasion

Archive

  • April 2024
  • March 2024
  • August 2023
  • July 2023
  • June 2023
  • January 2023
  • October 2022
  • July 2022
  • April 2022
  • February 2022

Categories

  • Application Security
  • Binary Exploitation
  • Certification Review
  • Defense Evasion
  • Malware Development
  • Open Source Software (OSS)
  • Phishing
  • Red Team
  • Security Research
  • ~$ whoami
Hestia | Developed by ThemeIsle