Remote Thread Injection in c# via Delegate Method + FunctionPointer Technique (Defender bypassed)

Published: 05 September 2023
on channel: Damon Mohammadbagher (bbxc9x00x1f)

170

Remote Thread Injection in c# via Delegate Method + FunctionPointer Technique (Defender bypassed)
Published by Damon Mohammadbagher.

this C# code was for 2019-2020 and i talked about that in my ebook "Bypassing AVs by C#.NET Programming v1.0" (Published in 2016 up to 2020 , free) but code still working on Windows Defender with (update 2023/08/28) , a little bit code changed by me which you can see in video , VirtualProtectEx added for changing RWX to X for payload also encrypted payload hardcoded to the source code and decrypted by xor and Bingo code works very well , yeah sometimes old methods will be new codes/methods ;D , as you can see in code we don't have imported apis likes CreateRemoteThread or VIrtualAllocEx etc instead we use Delegate methods + FunctionPointers technique and this is very important point also changing RWX to X is important too...

you can find details about code here in ebook v1.0 : https://github.com/DamonMohammadbaghe...

or here in web you can see ebook v1.0 online (free) in chapter14-part2 : https://damonmohammadbagher.github.io...

#ebook #redteam #pentest #blueteam #threathunting #soc #deffensive #offensivesecurity #csharp

On this page of the site you can watch the video online Remote Thread Injection in c# via Delegate Method + FunctionPointer Technique (Defender bypassed) with a duration of hours minute second in good quality, which was uploaded by the user Damon Mohammadbagher (bbxc9x00x1f) 05 September 2023, share the link with friends and acquaintances, this video has already been watched 170 times on youtube and it was liked by 9 viewers. Enjoy your viewing!

16,064