Thread Hijacking Remote Thread Enumeration

Source provenance. Raw material catalogued for the wiki ingest pipeline. Lives offline at raw_sources/offensive-security/Thread Hijacking - Remote Thread Enumeration.md.

Status: catalogued

Excerpt

Module 38 - Thread Hijacking - Remote Thread Enumeration This module covers the usage of CreateToolhelp32Snapshot to enumerate threads of a remote process. Minor changes are made to the GetLocalThreadHandle function, shown in the previous module, to make it work against remote threads. The logic remains the same where CreateToolhelp32Snapshot, Thread32First and Thread32Next are used to e…

Likely wiki targets

Pending — this source has not yet been distilled into wiki pages. Future ingest can populate links to the concept / technique / CVE pages this material would inform.