# No Alloc, No Problem: Leveraging Program Entry Points for Process Injection

DevFeed: [No Alloc, No Problem: Leveraging Program Entry Points for Process Injection](<https://devfeed.tech/articles/no-alloc-no-problem-leveraging-program-entry-points-for-process-injection-20506.md>)

Original publisher: [Read original article](<https://bohops.com/2023/06/09/no-alloc-no-problem-leveraging-program-entry-points-for-process-injection/>)

Author: bohops

Published: 2023-06-09T00:53:46Z

Content type: tutorial

Language: en

Sources: [Bohops](<https://devfeed.tech/sources/bohops.md>)

Topics: [Processes](<https://devfeed.tech/topics/processes.md>), [Operating system](<https://devfeed.tech/topics/operating-system.md>), [Code](<https://devfeed.tech/topics/code.md>), [modules](<https://devfeed.tech/topics/modules.md>)

Tags: [code](<https://devfeed.tech/tags/code.md>), [microsoft](<https://devfeed.tech/tags/microsoft.md>), [modules](<https://devfeed.tech/tags/modules.md>), [process](<https://devfeed.tech/tags/process.md>), [uncategorized](<https://devfeed.tech/tags/uncategorized.md>)

## AI overview

This technical article examines process injection techniques that leverage program entry points, including the AddressOfEntryPoint in Portable Executable files. It describes approaches intended to avoid explicit memory allocation and direct thread creation or thread-context manipulation.

## Source excerpt

Introduction Process Injection is a popular technique used by Red Teams and threat actors for defense evasion, privilege escalation, and other interesting use cases. At the time of this publishing, MITRE ATT&CK includes 12 (remote) process injection sub-techniques. Of course, there are numerous other examples as well as various and sundry derivatives. Recently, I was [...]