execute a PE in the address space of another PE aka process hollowing
☆57Dec 2, 2021Updated 4 years ago
Alternatives and similar repositories for go-runpe
Users that are interested in go-runpe are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Golang version of https://github.com/hasherezade/libpeconv☆28Jan 31, 2020Updated 6 years ago
- Thanks to @d35ha☆12Aug 16, 2021Updated 5 years ago
- RunPE using Hell's Gate technique.☆31Dec 4, 2020Updated 5 years ago
- Create a C++ PE which loads an XTEA-crypted .NET PE shellcode in memory.☆16Sep 29, 2018Updated 8 years ago
- Loader and RunPE file executer☆19Jun 12, 2019Updated 7 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Windows Application Loader Running *.Exe files in Memory against Scrylla☆21Dec 20, 2019Updated 6 years ago
- Process Hollowing☆12Sep 13, 2017Updated 9 years ago
- Techniques that i have used to evade anti-virus during pen tests.☆13May 29, 2018Updated 8 years ago
- Allow a Go process to dynamically load .NET assemblies☆148Mar 28, 2020Updated 6 years ago
- 💉 A tool that allows shellcode injection into another process's memory space. It works for both Windows x64 and x86 systems.☆12Oct 1, 2019Updated 7 years ago
- Go implementation of the Heaven's Gate technique☆99Feb 11, 2021Updated 5 years ago
- Small utility package for manipulating Windows process tokens☆24Apr 26, 2022Updated 4 years ago
- Two C# RunPE's capable of x86 and x64 injections☆10Dec 2, 2018Updated 7 years ago
- A PoC package for hosting the CLR and executing .NET from Go☆78Oct 4, 2026Updated 2 weeks ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Bypass AMSI and Executing PowerShell scripts from C# - using CyberArk's method to bypass AMSI☆30Feb 22, 2020Updated 6 years ago
- Process Injection Techniques with Golang☆78May 29, 2020Updated 6 years ago
- Reflectively load PE☆104Aug 4, 2020Updated 6 years ago
- Using the Windows API to mess with Task Manager in GoLANG☆14Sep 7, 2021Updated 5 years ago
- Convert PE files to a shellcode☆84May 7, 2020Updated 6 years ago
- Encrypt embedded go files using age.☆48Oct 21, 2021Updated 4 years ago
- An example of PE hollowing injection technique☆26Jun 28, 2019Updated 7 years ago
- About C# loader that copies a chunk at the time of the shellcode in memory in a suspended process, rather that all at once☆12Jul 14, 2022Updated 4 years ago
- A modified RunPE (process hollowing) technique avoiding the usage of SetThreadContext by appending a TLS section which calls the original…☆94Sep 26, 2019Updated 7 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Golang packer that use process hollowing☆18May 1, 2022Updated 4 years ago
- Several self-defense shellcodes☆23Jul 16, 2019Updated 7 years ago
- Download payload to disk and install it to startup then melt.☆33Apr 9, 2019Updated 7 years ago
- Load CLR to get RWX 通过加载clr在自身内存中产生rwx空间☆21Sep 28, 2022Updated 4 years ago
- Windows Malware monitors and infects specific kinds of files.☆18Sep 24, 2019Updated 7 years ago
- Process Hollowing for 32 bit and 64 bit☆76Nov 10, 2017Updated 8 years ago
- 无模块注入工程 VS2008☆11Jul 23, 2018Updated 8 years ago
- Simple remote administration tool. Written in c++ and MASM.☆18May 16, 2018Updated 8 years ago
- ☆31Aug 23, 2020Updated 6 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A collection of shell code conversion scripts that I have written over time for repetitive tasks☆19Jul 6, 2019Updated 7 years ago
- EGESPLOIT is a golang library for malware development☆339Jan 26, 2017Updated 9 years ago
- Analysis and Modification Tool for Executables☆18Mar 28, 2019Updated 7 years ago
- CVE-2019-1064 Local Privilege Escalation Vulnerability☆11Jun 12, 2019Updated 7 years ago
- Hide malware behind a legit process C#☆127Mar 1, 2020Updated 6 years ago
- Preventing 3rd Party DLLs from Injecting into your Malware☆25Aug 31, 2021Updated 5 years ago
- Change hash for a signed pe☆18Jul 18, 2023Updated 3 years ago