Передача данных (IPC) через ETHREAD

[DildoFagins]

Наткнулся на забавный проект на гитхабе:
https://github.com/LloydLabs/dearg-thread-ipc-stealth
Жаль работает только на десятках.

 

[smelly__vx]

I do not believe this method only works on newer versions of Windows 10. The method illustrated by this person has been implemented before in earlier versions of Windows.

In 2019 Hugsy released a paper illustrating a similar concept.