proc/pid/mem injection - SERP Analysis

https://aquasecurity.github.io/tracee/v0.19/docs/events/builtin/signatures/proc_mem_code_injection/

https://attack.mitre.org/techniques/T1055/009/

https://blog.cloudflare.com/diving-into-proc-pid-mem/

https://www.akamai.com/blog/security-research/the-definitive-guide-to-linux-process-injection

https://www.picussecurity.com/resource/blog/t1055-009-proc-memory

https://joev.dev/posts/unprivileged-process-injection-techniques-in-linux

https://www.labs.greynoise.io/grimoire/2025-01-28-process-injection/

https://sigma-star.at/blog/2024/02/exit0-code-injection/

https://www.aon.com/cyber-solutions/aon_cyber_labs/linux-based-inter-process-code-injection-without-ptrace2/

https://unix.stackexchange.com/questions/750981/why-isnt-access-to-proc-pid-mem-a-security-vulnerability

https://avd.aquasec.com/tracee/defense-evasion/trc1024/

https://stackoverflow.com/questions/61560563/how-do-you-inject-code-onto-a-process-without-ptrace

https://github.com/BishopFox/asminject

https://news.ycombinator.com/item?id=21930077

https://www.picussecurity.com/resource/t1055-process-injection-of-the-mitre-attck-framework

https://www.phoronix.com/news/Linux-6.11-Tightens-Mem-Access

https://stackoverflow.com/questions/64178018/reading-proc-pid-mem-file-returns-nothing

https://gms.tf/inject_code.html

https://github.com/AonCyberLabs/Cexigua

https://docs.kernel.org/filesystems/proc.html

https://jm33.me/emp3r0r-process-injection-and-persistence.html

https://www.linkedin.com/pulse/hacking-proc-filesystem-memory-arthur-damm

https://www.00xbyte.com/posts/dd-oriented-programing/

https://offlinemark.com/an-obscure-quirk-of-proc/

https://attack.mitre.org/techniques/T1003/007/

https://man7.org/linux/man-pages/man5/proc_pid_mem.5.html

https://blog.hackingforce.com.br/en/linux-process-injection

https://blog.xpnsec.com/linux-process-injection-aka-injecting-into-sshd-for-fun/

https://news.ycombinator.com/item?id=21913141

https://code-white.com/blog/2023-08-blindsiding-auditd-for-fun-and-profit/

https://guidedhacking.com/threads/proc-pid-mem-permissions.15054/

https://www.linkedin.com/pulse/hacking-program-using-virtual-memory-edgar-quintero

https://www.reddit.com/r/LiveOverflow/comments/en2n37/inject_a_shared_library_ie_arbitrary_code_into_a/

https://book.jorianwoltjer.com/linux/analyzing-processes

https://www.reddit.com/r/linux_programming/comments/186tx3p/is_ptrace_optimal/

https://medium.com/%40lsecqt/basic-process-injection-with-c-e6d4d2fa3b4a

https://repository.root-me.org/Reverse%20Engineering/x86/Unix/FR%20-%20SSTIC%2006%20-%20Playing%20with%20ptrace.pdf

https://mutur4.github.io/posts/remote-process-injection/

https://docs.kernel.org/admin-guide/mm/pagemap.html

https://fadeevab.com/shared-library-injection-on-android-8/

https://perception-point.io/blog/changing-mprotect-in-an-arbitrary-process/

https://trustedsec.com/blog/linux-hows-my-memory

https://archive.hack.lu/2019/Fileless-Malware-Infection-and-Linux-Process-Injection-in-Linux-OS.pdf

https://mariozechner.at/posts/2024-07-20-macos-code-injection-fun/

https://medium.com/%40tfoldi/hiding-injected-modules-and-tracepid-on-arm64-linux-49818db6d182

https://trustedsec.com/blog/the-nightmare-of-proc-hollows-exe

https://superuser.com/questions/620004/invoke-and-track-memory-usage-of-one-process

https://eklitzke.org/ptrace

https://blog.xpnsec.com/undersanding-and-evading-get-injectedthread/

https://www.securonix.com/blog/securonix-threat-labs-monthly-intelligence-insights-march-2025/

https://git.sceen.net/linux/linux-stable.git/log/fs?h=linux-6.10.y&ofs=50&showmsg=1

https://www.group-ib.com/blog/linux-pro-manipulation/

https://web.eecs.umich.edu/~zmao/Papers/usenixSec14.pdf

https://git.zx2c4.com/linux-rng/tree/lib/Kconfig.debug?id=7fa8a8ee9400fe8ec188426e40e481717bc5e924

https://gruss.cc/files/procharvester.pdf

https://linuxgazette.net/issue83/sandeep.html

https://success.trendmicro.com/en-US/solution/KA-0016974

https://kernelnewbies.org/Linux_6.2

https://www.evilsocket.net/2015/05/01/Dynamically-inject-a-shared-library-into-a-running-process-on-Android-ARM/

http://www.cs.toronto.edu/~sahil/suneja-woc20.pdf

https://www.cyberark.com/resources/threat-research-blog/masking-malicious-memory-artifacts-part-iii-bypassing-defensive-scanners

https://www.sciencedirect.com/science/article/pii/0091305783900710/pdf?md5=288c5f41cecf0b2a7776f9d1f15024cc&pid=1-s2.0-0091305783900710-main.pdf

https://ieeexplore.ieee.org/iel7/43/10684348/10506236.pdf

https://www.securearc.com/cso/assessment/threats/

https://memoryhackers.org/konular/bypass-memory-manipulating-protection-in-android.84786/

https://www.researchgate.net/publication/233828348_FPGA-Based_Multiprocessor_System_for_Injection_Molding_Control

https://groups.google.com/g/comp.os.linux.development.system/c/TvuZ3fzgxzY

https://repo.jachan.dev/J-linux.git/search/b89fbfbb854c9afc3047e8273cc3a694650b802e?s=Namhyung%2BKim%3Bst=author

https://web.mit.edu/adamrose/Public/googlelist

https://web.mit.edu/~ecprice/Public/wordlist.ranked

https://manpages.debian.org/bookworm/manpages/proc.5.en.html

https://comp.os.linux.development.system.narkive.com/zCIbJjBt/what-is-proc-pid-mem-for

https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/5/html/deployment_guide/s2-proc-pid

http://man.he.net/man5/proc