Process Hollowing in C++ (x86 / x64) - Process PE image replacement
☆202Aug 1, 2023Updated 3 years ago
Alternatives and similar repositories for Process-Hollowing
Users that are interested in Process-Hollowing are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- POC Ring3 Windows Rootkit (x86 / x64) - Hide processes and files☆61Aug 1, 2023Updated 3 years ago
- PE Explorer in C++ (x86 / x64) - PE file parser, retrieve exports and imports☆85Feb 17, 2024Updated 2 years ago
- ZwProcessHollowing is a x64 process hollowing project which uses direct systemcalls, dll unhooking and RC4 payload decryption☆98Mar 23, 2023Updated 3 years ago
- IAT Hooking POC (x86 / x64) - Hook functions through the IAT☆43Jul 29, 2024Updated 2 years ago
- Yet another variant of Process Hollowing☆476Jul 31, 2025Updated last year
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Custom LoadLibrary / GetProcAddress (x86 / x64) - Load DLL and retrieve functions manually☆104Aug 4, 2023Updated 3 years ago
- With this RunPE you can easily inject your payload in any x86 or x64 program.☆16Jun 3, 2019Updated 7 years ago
- Red Team Operation's Defense Evasion Technique.☆57Jun 4, 2024Updated 2 years ago
- Malware dev tricks. Syscalls part 1. Simple C example☆12Jun 8, 2023Updated 3 years ago
- Performing Indirect Clean Syscalls☆633May 2, 2026Updated 6 months ago
- Some crazy PE executables protection kernel driver☆20May 2, 2020Updated 6 years ago
- Run a Exe File (PE Module) in memory (like an Application Loader)☆941Mar 28, 2021Updated 5 years ago
- Simple Kernelmode DLL Injector with Manual mapping☆375Nov 29, 2023Updated 2 years ago
- DLL Injector (LoadLibrary) in C++ (x86 / x64) - LoadLibrary DLL injector☆192Aug 1, 2023Updated 3 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Stealing signatures from pe files☆14Apr 1, 2025Updated last year
- Various Process Injection Techniques☆166Jun 14, 2022Updated 4 years ago
- Create a C++ PE which loads an XTEA-crypted .NET PE shellcode in memory.☆16Sep 29, 2018Updated 8 years ago
- Custom GetProcAddress, GetModuleHandleA and some dbghelp.dll functions☆85Feb 13, 2019Updated 7 years ago
- Process Ghosting - a PE injection technique, similar to Process Doppelgänging, but using a delete-pending file instead of a transacted fi…☆699Mar 11, 2024Updated 2 years ago
- Splitting and executing shellcode across multiple pages☆102Jun 8, 2023Updated 3 years ago
- Uses Threat-Intelligence ETW events to identify shellcode regions being hidden by fluctuating memory protections☆190May 17, 2023Updated 3 years ago
- Load static-compiled PE from remote server.☆65Jan 8, 2022Updated 4 years ago
- simple shellcode injector for Windows / Process Hollowing☆15Jun 26, 2024Updated 2 years ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- A library with four different methods to execute shellcode in a process☆25Mar 24, 2020Updated 6 years ago
- x64 binary obfuscator☆2,003Jul 14, 2023Updated 3 years ago
- library for importing functions from dlls in a hidden, reverse engineer unfriendly way☆1,934Aug 3, 2023Updated 3 years ago
- Bypasses for Windows kernel callbacks PatchGuard protection☆46Aug 15, 2021Updated 5 years ago
- Mid Hook Template (x64) - Easy way to mid function hooking in x64☆33Aug 1, 2023Updated 3 years ago
- This is a tutorial and introduction to Reflective DLL Injection + reading outputs of injected dll using named pipes.☆20Feb 8, 2025Updated last year
- 🗜️ A packer for Windows x86 executable files written in C and Intel x86 Assembly. The new file after packing can obstruct reverse engine…☆369Oct 22, 2024Updated 2 years ago
- Disables virtualprotect checks/hooks so you can modify memory and change memory protection in binaries protected by VMProtect.☆143Jun 13, 2021Updated 5 years ago
- Transacted Hollowing - a PE injection technique, hybrid between ProcessHollowing and ProcessDoppelg änging☆609Mar 8, 2024Updated 2 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- proof of concept of user-mode anti-breakpoint technique☆15Sep 15, 2023Updated 3 years ago
- Manual mapper that uses PTE manipulation, Virtual Address Descriptor (VAD) manipulation, and forceful memory allocation to hide executabl…☆420Jan 29, 2022Updated 4 years ago
- A more stealthy variant of "DLL hollowing"☆369Mar 8, 2024Updated 2 years ago
- Windows x64 kernel mode rootkit process hollowing POC.☆194Jun 30, 2023Updated 3 years ago
- Loader and RunPE file executer☆19Jun 12, 2019Updated 7 years ago
- Loading Remote AES Encrypted PE in memory , Decrypted it and run it☆1,043Aug 29, 2023Updated 3 years ago
- PE loader with various shellcode injection techniques☆466Oct 17, 2022Updated 4 years ago