Tagged: Process Ghosting Attack

KingHamlet: Process Ghosting Tool

KingHamlet Process Ghosting Tool – 64 bits Only! King Hamlet is a simple tool, which allows you to perform a Process Ghosting Attack. (https://www.elastic.co/blog/process-ghosting-a-new-executable-image-tampering-attack) Initially, you have to encrypt a file, which is later...