Démarrer Windows 11 en mode sans échec

Depuis le menu Démarrer ou à l’écran de connexion, maintenez Maj enfoncée et cliquez sur Redémarrer. Vous pourrez ensuite choisir Dépannage → Options avancées → Paramètres → Redémarrer Une fois le Poste redémarré choisissez l’option 4 ( F4 ) pour le mode sans échec.

Session Hijacking via Task Scheduler

When a privileged domain user (for example, a Domain Admin) is interactively logged on to a Windows server, a local administrator on that system can leverage the Windows Task Scheduler to achieve code execution inside the user’s logon session.

Understanding Process Injection

Process injection is a technique used by attackers to inject malicious code into the memory space of a running process. Unlike process hollowing, which replaces the entire executable image of a process, process injection allows the attacker to run their payload within an existing process without altering its main execution flow. This technique is widely

Understanding Process Hollowing

Process hollowing is a stealthy technique used in malware development where an attacker starts a legitimate process and then replaces its executable code with malicious code. This allows the attacker to run their payload while maintaining the illusion that a trusted application is running. To understand how this works, we need to look at how