AzAgarampur / PsForge
Process Hollowing demonstration & explanation
☆32Updated 3 years ago
Related projects ⓘ
Alternatives and complementary repositories for PsForge
- Listing UDP connections with remote address without sniffing.☆30Updated last year
- An initial proof of concept of a bootkit based on Cr4sh's DMABackdoorBoot☆59Updated last year
- Inject shellcode to process using Windows NTAPI for bypassing EDRs and Antiviruses☆40Updated 3 years ago
- A multi-staged malware that contains a kernel mode rootkit and a remote system shell.☆69Updated 3 years ago
- Process Hollowing POC in CPP☆15Updated 4 years ago
- Tiny driver patch to allow kernel callbacks to work on Win10 21h1☆31Updated 2 years ago
- Recreating and reviewing the Windows persistence methods☆39Updated 3 years ago
- Windows GPU rootkit PoC by Team Jellyfish☆35Updated 9 years ago
- A simple PE loader.☆25Updated last year
- API Hammering with C++20☆34Updated 2 years ago
- Demonstrate calling a kernel function and handle process creation callback against HVCI☆48Updated last year
- ☆15Updated 3 years ago
- C++ implementation of DOUBLEPULSAR usermode shellcode. Yet another Reflective DLL loader.☆29Updated 3 years ago
- ☆31Updated 4 years ago
- Former Multi - Ring to Kernel To UserMode Transitional Shellcode For Remote Kernel Exploits☆28Updated 2 years ago
- ☆98Updated 2 years ago
- APC DLL Injector with NtQueueApcThread and wake up thread support☆44Updated 7 years ago
- ☆22Updated last year
- ☆27Updated 2 years ago
- A Practical example of ELAM (Early Launch Anti-Malware)☆31Updated 3 years ago
- Process Injection: APC Injection☆27Updated 3 years ago
- A kernel mode Windows rootkit in development.☆49Updated 2 years ago
- Collection of shellcode injection and execution techniques☆16Updated 3 years ago
- Bypass UAC at any level by abusing the Task Scheduler and environment variables☆27Updated 3 years ago
- Enabled / Disable LSA Protection via BYOVD☆62Updated 2 years ago
- Execute shellcode with ZwCreateSection, ZwMapViewOfSection, ZwOpenProcess, ZwMapViewOfSection and ZwCreateThreadEx☆14Updated 3 years ago
- This script is used to unload PsSetCreateProcessNotifyRoutineEx, PsSetCreateProcessNotifyRoutine, PsSetLoadImageNotifyRoutine and PsSetCr…☆62Updated 9 months ago