Page 1 of 1

Stealth Hook

Posted: Sat Feb 16, 2019 1:16 pm
by c6754
How do I hook without a process seeing it in the stack?

ex. replace getprocaddress in a process without the call being seen on the stack

Do I hook the stack or use KeAttachStackProcess()?

im kinda new to kernel