KnownDlls TOCTOU vulnerability in CSRSS, and finally using Shellcode Reflective DLL Injection (sRDI) to achieve code execution in a PPL process.
[Read More]Process Injection: The Journey to Penetrate Windows' Protected Process Light Security Barrier
A deep-dive into advanced process injection techniques, demonstrating how to bypass Windows’ Protected Process Light (PPL) security mechanism. The post covers the journey from classic DLL injection to exploiting the