A technique used by attackers to intercept and modify the behavior of functions in a running application. Hooking is typically done by injecting code into a process that reroutes the execution flow of target functions, allowing the attacker to monitor, alter, or hijack data as it moves through the system.
An attacker uses hooking to intercept a mobile app’s encryption function, allowing them to view sensitive data in plain text.
What does hooking allow an attacker to modify in an application?
The behavior of functions in a running application.
