6

How can a process be hidden inside another one?

Is the process moved into another process and turned into a thread with it's own run loop?

How exactly does a process get moved? I see this Metasploit command, migrate PID which seems to do this.

I would like to know how this works internally, does it use IPC or if the memory of the process is being moved into a target process with PID, how is this done and how does the process being migrated continue to run?

1

Is the process moved into another process and turned into a thread with it's own run loop?

Essentially Yes.

| improve this answer | |

Not the answer you're looking for? Browse other questions tagged or ask your own question.