Various Process Injection Techniques
☆166Jun 14, 2022Updated 4 years ago
Alternatives and similar repositories for Process-Injection-Techniques
Users that are interested in Process-Injection-Techniques are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- DLL-Obfuscation, Keep The Dll Encrypted on disc all the time and decrypt it only in memory.☆21Sep 6, 2021Updated 5 years ago
- Load Encrypted Dll Using LoadLibraryA, Keep The Dll Encrypted on disc all the time and decrypt it only in memory.☆25Sep 5, 2021Updated 5 years ago
- Self delete DLL (2)☆14Feb 15, 2024Updated 2 years ago
- Anti-Analysis technique, trick the debugger by Hiding events from it.☆19Sep 6, 2021Updated 5 years ago
- Windows API Call Obfuscation☆112Dec 9, 2022Updated 3 years ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- Archive R/W into any protected process by changing the value of KTHREAD->PreviousMode☆162Jul 31, 2022Updated 4 years ago
- ☆68Oct 9, 2026Updated 3 weeks ago
- IAT-Obfuscation to make static analysis of executable harder.☆44Sep 6, 2021Updated 5 years ago
- Some drivers I've written while solving exercises from Practical Reverse Engineering☆15Jan 9, 2022Updated 4 years ago
- Manual mapper that uses PTE manipulation, Virtual Address Descriptor (VAD) manipulation, and forceful memory allocation to hide executabl…☆420Jan 29, 2022Updated 4 years ago
- Reduce Dynamic Analysis Detection Rates With Built-In Unhooker, Anti Analysis Techniques, And String Obfuscator Modules.☆21Dec 21, 2022Updated 3 years ago
- Drawing from kernelmode without any hooks☆176Jul 7, 2022Updated 4 years ago
- Hijack NotifyRoutine for a kernelmode thread☆39Jun 4, 2022Updated 4 years ago
- ☆117Aug 7, 2022Updated 4 years ago
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- A proof of concept demonstrating the DLL-load proxying using undocumented Syscalls.☆411Jan 11, 2026Updated 9 months ago
- Proof of concept Beacon Object File (BOF) that attempts to detect userland hooks in place by AV/EDR☆161Jul 22, 2021Updated 5 years ago
- kernel mode spoofer disk and smbios, socket communication☆277Nov 29, 2022Updated 3 years ago
- ☆33Dec 16, 2023Updated 2 years ago
- Collection of IDA helpers☆16Jul 25, 2022Updated 4 years ago
- hidden_syscall - syscaller without using syscall instruction in code☆68Jan 23, 2023Updated 3 years ago
- Performing Indirect Clean Syscalls☆633May 2, 2026Updated 6 months ago
- C code to enable ETW tracing for Dotnet Assemblies☆31Aug 12, 2022Updated 4 years ago
- Walks the Process' VAD list to grab the PTE's corresponding to a usermode virtual address, all to get the physical address☆23Nov 22, 2021Updated 4 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Old way for blocking NMI interrupts☆30Sep 6, 2022Updated 4 years ago
- C++17 PE manualmapper☆492Oct 2, 2021Updated 5 years ago
- A PoC implementation for spoofing arbitrary call stacks when making sys calls (e.g. grabbing a handle via NtOpenProcess)☆603Apr 8, 2025Updated last year
- ☆105Oct 7, 2023Updated 3 years ago
- PoC Implementation of a fully dynamic call stack spoofer☆1,015Jul 20, 2024Updated 2 years ago
- Expanding Kernel Lazy Importer☆34Feb 16, 2023Updated 3 years ago
- ☆84Aug 26, 2024Updated 2 years ago
- POC of PPID spoofing using NtCreateUserProcess with syscalls to create a suspended process and performing process injection by overwritti…☆41Sep 23, 2021Updated 5 years ago
- A simple present scene, kernel allocation injector.☆28Jun 12, 2022Updated 4 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Evasive shellcode loader for bypassing event-based injection detection (PoC)☆834Aug 23, 2021Updated 5 years ago
- Walks through the 4-level paging structures in Windows x64☆14Feb 12, 2023Updated 3 years ago
- Loads a signed kernel driver which allows you to map any driver to kernel mode without any traces of the signed / mapped driver.☆424Aug 8, 2021Updated 5 years ago
- Driver that uses network sockets to communicate with client and read/ write protected process memory.☆668Feb 22, 2019Updated 7 years ago
- A basic demonstration of directly overwriting paging structures for physical memory r/w and interprocess memory copy☆106Jun 26, 2023Updated 3 years ago
- A rust based DLL injection project☆29Sep 18, 2022Updated 4 years ago
- Unknowncheats Magically Optimized Tidy Mapper using nvaudio☆172Jun 11, 2024Updated 2 years ago