Alternatives and similar repositories for ProcessHollowing_CSharp:

Users that are interested in ProcessHollowing_CSharp are comparing it to the libraries listed below

• Kara-4search / HookDetection_CSharp
  HookDetection
  ☆45Updated 3 years ago
• plackyhacker / Unhook-BitDefender
  Unhooks Bit Defender from NTDLL and KERNELBASE using a classic technique.
  ☆54Updated last year
• Kara-4search / FullDLLUnhooking_CSharp
  Unhook DLL via cleaning the DLL 's .text section
  ☆9Updated 3 years ago
• Kara-4search / EarlyBirdInjection_CSharp
  Inject shellcode into process via "EarlyBird"
  ☆25Updated 3 years ago
• Kara-4search / BypassETW_CSharp
  Bypassing ETW with Csharp
  ☆26Updated 3 years ago
• GetRektBoy724 / HalosUnhooker
  Halos Gate-based NTAPI Unhooker
  ☆50Updated 2 years ago
• Kara-4search / MappingInjection_CSharp
  MappingInjection via csharp
  ☆38Updated 3 years ago
• GetRektBoy724 / SharpLoadLibrary
  An attempt to make a LoadLibrary designed for offensive operations, in C# obviously.
  ☆54Updated 2 years ago
• Kara-4search / ThreadHijacking_CSharp
  Process inject technique "Thread hijacking" via csharp
  ☆14Updated 3 years ago
• rvrsh3ll / PELoader
  Load PE via XML Attribute
  ☆29Updated 5 years ago
• Kara-4search / BypassAMSI_CSharp
  Bypass AMSI
  ☆14Updated 3 years ago
• Kara-4search / Fiber_ShellcodeExecution
  Using fibers to execute shellcode in a local process via csharp
  ☆28Updated 3 years ago
• Kara-4search / Simple_ShellCodeLoader_CSharp
  A Simple ShellcodeLoader
  ☆11Updated 3 years ago
• NUL0x4C / ManualRsrcDataFetching
  Get your data from the resource section manually, with no need for windows apis
  ☆58Updated 4 months ago
• N4kedTurtle / ExecuteAssembly_Mailslot
  ☆36Updated 4 years ago
• CodeXTF2 / BusySleepBeacon
  This is a simple project made to evade https://github.com/thefLink/Hunt-Sleeping-Beacons by using a busy wait instead of beacon's built i…
  ☆32Updated 3 years ago
• PorLaCola25 / PPID-Spoofing
  POC of PPID spoofing using NtCreateUserProcess with syscalls to create a suspended process and performing process injection by overwritti…
  ☆39Updated 3 years ago
• ScriptIdiot / sleepmask_ekko_cfg
  Code snippets to add on top of cobalt strike sleepmask kit so that ekko can work in a CFG protected process
  ☆43Updated last year
• GetRektBoy724 / SysGate
  One gate to all syscalls!
  ☆23Updated 2 years ago
• mobdk / Upsilon
  Upsilon execute shellcode with syscalls - no API like NtProtectVirtualMemory is used
  ☆92Updated 3 years ago
• arsium / PELoader
  ☆20Updated last year
• mobdk / HideCode
  Hide code from dnSpy and other C# spying tools
  ☆41Updated 4 years ago
• Hagrid29 / herpaderply_hollowing
  Herpaderply Hollowing - a PE injection technique, hybrid between Process Hollowing and Process Herpaderping
  ☆51Updated 2 years ago
• Kara-4search / NewNtdllBypassInlineHook_CSharp
  Load a fresh new copy of ntdll.dll via file mapping to bypass API inline hook.
  ☆59Updated 3 years ago
• timwhitez / AddressOfEntryPoint-injection
  x64 version
  ☆30Updated 3 years ago
• FuzzySecurity / AdvSim.Compression
  Simple and sane compression wrapper library.
  ☆18Updated 2 years ago
• N4kedTurtle / HellsGatePoC
  ☆50Updated 4 years ago
• oXis / DoublePulsarPayload
  C++ implementation of DOUBLEPULSAR usermode shellcode. Yet another Reflective DLL loader.
  ☆29Updated 3 years ago
• EspressoCake / Toggle_Token_Privileges_BOF
  Syscall BOF to arbitrarily add/detract process token privilege rights.
  ☆53Updated 7 months ago
• guervild / InlineZipper
  ☆22Updated 3 years ago