Thread Hijacking Local Thread Enumeration
Source provenance. Raw material catalogued for the wiki ingest pipeline. Lives offline at
raw_sources/offensive-security/Thread Hijacking - Local Thread Enumeration.md.
Status: catalogued
Excerpt
Module 37 - Thread Hijacking - Local Thread Enumeration So far, when local thread hijacking was performed, the target thread was created using
CreateThreadand its context was modified. This module will demonstrate an alternative method where the system’s running threads are enumerated usingCreateToolhelp32Snapshotand then hijacked. Recall the use ofCreateToolhelp32Snapshotfrom previous…
Likely wiki targets
Pending — this source has not yet been distilled into wiki pages. Future ingest can populate links to the concept / technique / CVE pages this material would inform.
