hasherezade / injection
Windows process injection methods
☆15Updated 3 years ago
Alternatives and similar repositories for injection:
Users that are interested in injection are comparing it to the libraries listed below
- Listing UDP connections with remote address without sniffing.☆29Updated last year
- Remote PE reflective injection with a simple reflective loader☆31Updated 5 years ago
- GetModuleHandle (via PEB) and GetProcAddress (via EAT) like☆32Updated 3 years ago
- Process Injection: APC Injection☆29Updated 4 years ago
- ☆25Updated 2 years ago
- Manually perform syscalls without going through any external API or DLL.☆18Updated 2 years ago
- This exploit use PEB walk technique to resolve API calls dynamically, obfuscate all API calls to perform process injection.☆17Updated 8 months ago
- Herpaderply Hollowing - a PE injection technique, hybrid between Process Hollowing and Process Herpaderping☆54Updated 2 years ago
- Titan: A crappy Reflective Loader written in C and assembly for Cobalt Strike. Redirects DNS Beacon over DoH☆48Updated 3 years ago
- 2022 Updated Kernelmode-Code☆31Updated last year
- Research into removing strings & API call references at compile-time (Anti-Analysis)☆25Updated 10 months ago
- Injects position-dependent code into a code cave in an executable file, and applies relocations.☆22Updated last year
- ZwProcessHollowing is a x64 process hollowing project which uses direct systemcalls, dll unhooking and RC4 payload decryption☆84Updated 2 years ago
- Shadow Rebirth - An Aggressive Outbreak Anti-Debugging Technique☆11Updated 4 months ago
- An x64 binary executing code that's not inside of it.☆16Updated 2 years ago
- With this RunPE you can easily inject your payload in any x86 or x64 program.☆13Updated 5 years ago
- A Bumblebee-inspired Crypter☆80Updated 2 years ago
- Bypass UAC at any level by abusing the Task Scheduler and environment variables☆31Updated 3 years ago
- NT AUTHORITY\SYSTEM☆39Updated 4 years ago
- Collection of structures, prototype and examples for Microsoft Macro Assembler (MASM) x64.☆16Updated 4 years ago
- A multi-staged malware that contains a kernel mode rootkit and a remote system shell.☆71Updated 3 years ago
- Next gen process injection technique☆52Updated 4 years ago
- ☆108Updated 2 years ago
- A manual PE mapping implementation, aka reflective loader☆19Updated 2 years ago
- Safely manage the unloading of DLLs that have been hooked into a process. Context: https://github.com/KNSoft/KNSoft.SlimDetours/discussio…☆56Updated last week
- Bypass UAC by abusing the Security Center CPL and hijacking a shell protocol handler☆28Updated 3 years ago
- Demo from the Malware Analysis and Development Webinar☆20Updated last year
- kernel to user mode APC injector☆44Updated 3 years ago
- ☆38Updated 2 months ago
- A simple packer working with all PE files which cipher your exe with a XOR implementation☆14Updated 4 years ago