A process overwriting its own PEB to make an illusion that it has been loaded from a different path.
☆98Jun 24, 2021Updated 5 years ago
Alternatives and similar repositories for process_chameleon
Users that are interested in process_chameleon are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A more stealthy variant of "DLL hollowing"☆367Mar 8, 2024Updated 2 years ago
- My implementation of enSilo's Process Doppelganging (PE injection technique)☆651Aug 30, 2022Updated 3 years ago
- ChimeraPE (a PE injector type - alternative to: RunPE, ReflectiveLoader, etc) - a template for manual loading of EXE, loading imports pay…☆230Mar 22, 2023Updated 3 years ago
- ☆84Aug 26, 2024Updated last year
- Decoders for 7ev3n ransomware☆17Oct 24, 2016Updated 9 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Demos of various (also non standard) persistence methods used by malware☆229Mar 5, 2023Updated 3 years ago
- A set of small utilities, helpers for PIN tracers☆40Feb 15, 2026Updated 5 months ago
- Set of antianalysis techniques found in malware☆132Aug 25, 2023Updated 2 years ago
- Шаблон полнофункционального драйвера и обёртки над ядерным API☆111Aug 28, 2016Updated 9 years ago
- A demo implementation of a well-known technique used by some malware to evade userland hooking, using my library: libpeconv.☆20Apr 13, 2018Updated 8 years ago
- A ready-made template for a project based on libpeconv.☆54Apr 18, 2026Updated 3 months ago
- Archive of ransomware decryptors☆35Dec 7, 2017Updated 8 years ago
- Windows process injection methods☆20Jul 18, 2021Updated 5 years ago
- A small library helping to parse commandline parameters (for C/C++)☆60Apr 7, 2026Updated 3 months ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- Analysing and defeating PatchGuard universally☆34Nov 4, 2020Updated 5 years ago
- Simple driver to register all available process, thread, image, Registry, and Object callbacks☆123Oct 5, 2017Updated 8 years ago
- Simple header only library to change return address on current stack frame.☆21Sep 4, 2016Updated 9 years ago
- Execute an arbitrary command within the context of another process☆21Jun 28, 2019Updated 7 years ago
- Parser for a custom executable formats from Hidden Bee and Rhadamanthys malware☆59Aug 6, 2025Updated 11 months ago
- ☆14Jul 22, 2024Updated 2 years ago
- ☆18Apr 4, 2019Updated 7 years ago
- Various shellcodes☆12Sep 1, 2020Updated 5 years ago
- Windows x64 Process Scanner to detect application compatability shims☆38Oct 17, 2018Updated 7 years ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- Example of hijacking system calls via function pointer tables☆31Jun 26, 2021Updated 5 years ago
- A wrapper for capstone for bearparser☆16Oct 8, 2025Updated 9 months ago
- Software Distribution Service☆12Jul 2, 2015Updated 11 years ago
- findLoop - find possible encryption/decryption or compression/decompression code☆29Mar 30, 2019Updated 7 years ago
- Windows driver including couple different techniques for file removal when regular operation isn't possible.☆68Feb 11, 2016Updated 10 years ago
- a demo for x86/x64's paging memory management learning, convert a virtual address from ring3 to physical address in ring0☆18Aug 26, 2017Updated 8 years ago
- XEDParse emulator based on asmjit/asmtk.☆21Mar 22, 2024Updated 2 years ago
- ☆24Feb 3, 2021Updated 5 years ago
- pass game protect☆11Apr 26, 2014Updated 12 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- unicorn emulator for x64dbg☆34Feb 21, 2018Updated 8 years ago
- Set of my small utils related to cryptography, encoding, decoding etc☆96Sep 1, 2025Updated 10 months ago
- A modified RunPE (process hollowing) technique avoiding the usage of SetThreadContext by appending a TLS section which calls the original…☆96Sep 26, 2019Updated 6 years ago
- Transacted Hollowing - a PE injection technique, hybrid between ProcessHollowing and ProcessDoppelgänging☆581Mar 8, 2024Updated 2 years ago
- ☆26Apr 4, 2019Updated 7 years ago
- Retrieve pointers to undocumented kernel functions and offsets to members within undocumented structures to use in your driver by using t…☆63Jun 19, 2019Updated 7 years ago
- A simple program to scan for open handles in a process.☆61Dec 29, 2016Updated 9 years ago