Dirty Vanity - A New Approach to Code Injection & EDR Bypass

Explore a novel code injection technique called Dirty Vanity in this 38-minute Black Hat conference talk. Delve into the lesser-known forking mechanism built into Windows operating systems and learn how it can be exploited to challenge current injection detection and prevention methods. Discover how this technique opens up a wider spectrum of attacks that test common concepts of EDR TTPs. Examine the forking mechanism's internals and common activation methods. Gain insights into this innovative approach to code injection and its potential implications for cybersecurity professionals and researchers.