Search
๐Ÿน

Kernel APC Injector

์‹œ๊ธฐ
2022/09/04 โ†’ 2022/10/02
์—ญํ• 
๋ถ„์„
์ปค๋„
๊ธฐ์—ฌ๋„
70%
๊ฐœ์ธ/ํšŒ์‚ฌ
ํŒ€

Kernel APC Injector

์Šคํ„ฐ๋”” ๊ทธ๋ฃน - ์ง„ํ–‰ ๊ธฐ๊ฐ„: 2022.08 ~ 2022.09 - ์ง„ํ–‰ ์ธ์›: 3๋ช… (๋ณธ์ธ, ํƒ€์‚ฌ ๋ถ„์„๊ฐ€, ํ•™๋ถ€์ƒ) - Windows Kernel Level์—์„œ ๊ตฌ๋™๋˜๋Š” APC๋ฅผ ์ด์šฉํ•œ DLL Injector - ๊ธฐ์กด์˜ ์กด์žฌํ•˜๋˜ ์†Œ์Šค์ฝ”๋“œ๋ฅผ ๋ถ„์„ํ•˜๋ฉฐ ๊ณต๋ถ€
JavaScript
๋ณต์‚ฌ
ํ”„๋กœ์ ํŠธ ์„ค๋ช…
LiamKit์—์„œ ์‚ฌ์šฉ ํ•  Kernel Injector์— ๋Œ€ํ•œ ์ง€์‹์„ ์–ป๊ณ ์ž ํ•ด๋‹น ์Šคํ„ฐ๋””๋ฅผ ์ง„ํ–‰ํ•˜์˜€์Šต๋‹ˆ๋‹ค. ์†Œ์Šค์ฝ”๋“œ๋ฅผ ๋ถ„์„ํ•˜๋ฉฐ ์ดํ•ดํ•˜๋Š” ๋ฐฉ์‹์œผ๋กœ ์ง„ํ–‰ํ•˜์˜€์Šต๋‹ˆ๋‹ค.
Gained
โ€ข
Kernel Level APC Injector์˜ ๊ตฌ๋™ ๋ฐฉ์‹
โ€ข
Kernel Notify Routine์— ๋Œ€ํ•œ ์ดํ•ด

์†Œ์Šค ์ฝ”๋“œ

injdrv
wbenny

ํ™˜๊ฒฝ ์„ค์ •

1. Visual Stuido 2019 ~ present

1.1 Install WDK

2. IDA 7.0 ~ present

3. VMWare, Windows 10, Virtual KD ์„ค์ •

์‚ฌ์ „ ์ง€์‹

1. C, C++ Development

2. Windows Kernel

โ€ข
์ปค๋„ ๊ตฌ์กฐ์ฒด
โ€ข
์ปค๋„ ๊ธฐ๋ณธ ๊ฐœ๋… https://m.blog.naver.com/lastime1650/221967604976
โ€ข
์ปค๋„ ๋“œ๋ผ์ด๋ฒ„ https://docs.microsoft.com/ko-kr/windows-hardware/drivers/gettingstarted/

3. Injector, DLL Mapping , DLL

์†Œ์Šค ๋ถ„์„