3xpl01tc0d3r / ProcessInjection
This program is designed to demonstrate various process injection techniques
☆1,080Updated last year
Related projects ⓘ
Alternatives and complementary repositories for ProcessInjection
- LSASS memory dumper using direct system calls and API unhooking.☆1,491Updated 3 years ago
- AV/EDR evasion via direct system calls.☆1,811Updated last year
- A method of bypassing EDR's active projection DLL's by preventing entry point exection☆1,114Updated 3 years ago
- Also known by Microsoft as Knifecoat☆1,114Updated last year
- AV/EDR evasion via direct system calls.☆1,548Updated 2 years ago
- Open-Source Shellcode & PE Packer☆1,859Updated 9 months ago
- Retrieves exported functions from a legitimate DLL and generates a proxy DLL source code/template for DLL proxy loading or sideloading☆738Updated 4 years ago
- Original C Implementation of the Hell's Gate VX Technique☆954Updated 3 years ago
- Process Herpaderping proof of concept, tool, and technical deep dive. Process Herpaderping bypasses security products by obscuring the in…☆1,093Updated last year
- Adaptive DLL hijacking / dynamic export forwarding☆726Updated 4 years ago
- Tool to bypass LSA Protection (aka Protected Process Light)☆899Updated last year
- A tool for generating .NET serialized gadgets that can trigger .NET assembly load/execution when deserialized using BinaryFormatter from …☆876Updated 3 years ago
- Fileless lateral movement tool that relies on ChangeServiceConfigA to run command☆1,402Updated last year
- SysWhispers on Steroids - AV/EDR evasion via direct system calls.☆1,298Updated 3 months ago
- SigFlip is a tool for patching authenticode signed PE files (exe, dll, sys ..etc) without invalidating or breaking the existing signature…☆1,087Updated last year
- The Hunt for Malicious Strings☆1,098Updated 2 years ago
- Extracting Clear Text Passwords from mstsc.exe using API Hooking.☆1,227Updated 4 months ago
- A tool to kill antimalware protected processes☆1,383Updated 3 years ago
- ☆2,015Updated last year
- Dynamically invoke arbitrary unmanaged code from managed code without PInvoke.☆676Updated last year
- Process Injection☆752Updated 3 years ago
- Alternative Shellcode Execution Via Callbacks☆1,454Updated 2 years ago
- PoCs and tools for investigation of Windows process execution techniques☆883Updated this week
- Collection of Offensive C# Tooling☆1,381Updated last year
- Process Ghosting - a PE injection technique, similar to Process Doppelgänging, but using a delete-pending file instead of a transacted fi…☆631Updated 8 months ago
- A Windows kernel-mode rootkit that abuses legitimate communication channels to control a machine.☆685Updated 4 years ago
- ☆729Updated last year
- Dump the memory of a PPL with a userland exploit☆846Updated 2 years ago
- ☆1,531Updated 2 months ago
- A modern 64-bit position independent implant template☆1,053Updated 6 months ago