Process Injection - Part V
![Image](https://1.bp.blogspot.com/-3MEYax4tR4A/XgeYeHs3sOI/AAAAAAAAAcc/uIrwomE97eEMnnq9wWM2adMWOdhsXPMtgCLcBGAsYHQ/s1600/Shellcode.png)
Hello All, Wondering where is the part IV of the process injection blog post series ? The part IV of this series was written by Renos on Parent PID Spoofing technique. Parent PID Spoofing technique is useful for evading detection. In this post I will cover about Asynchronous Procedure Calls (APC) Queue Process Injection technique. Parent PID Spoofing can also be used with APC Queue Process Injection. The tool can be found on my github repo . What is Asynchronous Procedure Calls (APC) ? This is best described by Microsoft in their documentation . Below is the short brief about APC from the Microsoft Docs. An asynchronous procedure call (APC) is a function that executes asynchronously in the context of a particular thread. When an APC is queued to a thread, the system issues a software interrupt. The next time the thread is scheduled, it will run the APC function. An APC generated by the system is called a kernel-mode APC. An APC generated by an application is called a use