Tag: Windows API
-

DbgNexum: Shellcode injection using the Windows Debugging API
DbgNexum is a Proof-of-Concept for injecting shellcode using the Windows Debugging API and Shared Memory (File Mapping). It avoids writing and reading remote memory directly, instead using context manipulation to force the target process to load and execute the payload itself. The injector attaches to a target process and creates a suspended thread. Through a debug…
