SelectMyParent

What's this

This is a project for parent process spoofing.

How to use

step 1:Select a parent process and remember the pid

Step 2:Execute the following command. Implement parent process spoofing

SelectMyParent.exe notepad 928

Step 3:Using process explorer to view the process tree, you can see the successful spoofing

Reference

https://pentestlab.blog/2020/02/24/parent-pid-spoofing

https://ired.team/offensive-security/defense-evasion/parent-process-id-ppid-spoofing