Waiting Thread Hijacking technique, a stealthy process injection method that hijacks a waiting thread in a target process to execute shellcode. It avoids common detection triggers like SuspendThread or SetThreadContext by manipulating a thread’s return address. Read the article for more information.

Download PoC: Download

cargo build --release

./target/release/WaitingThreadHijacking.exe <PID>

• Blog - https://research.checkpoint.com/2025/waiting-thread-hijacking/
• By Hasherezade -https://github.com/hasherezade/waiting_thread_hijacking

For More PoC: Main Menu