Process Hollowing for 32 bit and 64 bit
☆75Nov 10, 2017Updated 8 years ago
Alternatives and similar repositories for ProcessHollowing32-64
Users that are interested in ProcessHollowing32-64 are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- 无模块注入工程 VS2008☆11Jul 23, 2018Updated 8 years ago
- A small commented POC for removing API hooks placed by AV/EDR.☆34Jun 12, 2020Updated 6 years ago
- PoC for Bypassing UM Hooks By Bruteforcing Intel Syscalls☆39Nov 20, 2015Updated 10 years ago
- ☆19Aug 19, 2021Updated 5 years ago
- An implementation of the Process Hollowing technique.☆16Dec 13, 2020Updated 5 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- ☆21Mar 24, 2015Updated 11 years ago
- Convert native dll to shellcode, and support exported function☆24Feb 10, 2021Updated 5 years ago
- Register a callback from a Manually mapped kernel module☆14Feb 1, 2022Updated 4 years ago
- Executes 64bit code from a 32bit process☆238Jul 23, 2017Updated 9 years ago
- A dynamic VMP dumper and import fixer, powered by VTIL.☆45Sep 3, 2020Updated 6 years ago
- 一个简单的 稳定 ICMP 传输 示例，在公网中传输可能有点慢，但很稳定，适合初学者☆12Mar 9, 2022Updated 4 years ago
- ☆11Feb 19, 2023Updated 3 years ago
- Vulnerability analysis and proof of concepts☆39May 15, 2023Updated 3 years ago
- execute a PE in the address space of another PE aka process hollowing☆57Dec 2, 2021Updated 4 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Metamorphic Code Generator & Loader☆15Dec 7, 2020Updated 5 years ago
- This is a sample that shows how to leverage SetThreadContext for DLL injection☆85Sep 4, 2017Updated 9 years ago
- CVE-2019-0708 Exploit Tool☆18Jul 18, 2019Updated 7 years ago
- Hooking Shadow and normal SSDT with Kaspersky Hypervisor and abusing alignment☆23Dec 5, 2020Updated 5 years ago
- Hook system calls, context switches, page faults and more.☆33Jul 25, 2019Updated 7 years ago
- adversarial machine learning for anti-malware software☆12May 17, 2018Updated 8 years ago
- ☆14Apr 7, 2018Updated 8 years ago
- Several self-defense shellcodes☆23Jul 16, 2019Updated 7 years ago
- This is a simple tool to remove the "Rich" header from binaries (EXE or DLL files) created by M$ development tools.☆32Feb 3, 2021Updated 5 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Local privilege escalation PoC exploit for CVE-2019-16098☆200Sep 13, 2019Updated 7 years ago
- crash poc & Leak info PoC☆16Mar 19, 2018Updated 8 years ago
- Windows Simple Process Logger implemented as driver☆18Oct 27, 2017Updated 9 years ago
- IDA script for vmprotect Windows Api address decoder☆53Jun 8, 2021Updated 5 years ago
- Inject unsigned DLL into Protected Process Light (PPL)☆41May 8, 2025Updated last year
- [C#]Main.exe < - > [C_DLL] < - > [C_KERNEL] = Memory_Editor via Kernel☆34Aug 4, 2026Updated 2 months ago
- ☆11Dec 1, 2015Updated 10 years ago
- This is the AV ("protection solution") used for my windows 10 rootkit main project. this includes the installer stager program, a service…☆13May 2, 2024Updated 2 years ago
- Reflective PE loader for DLL injection☆184Oct 12, 2017Updated 9 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Process doppelganging POC using direct system calls, PPID spoofing and dropbox as an external delivery channel for the payload.☆17Jan 7, 2021Updated 5 years ago
- GUI Application in C# to run and disassemble shellcode☆35Aug 3, 2017Updated 9 years ago
- ☆17Sep 15, 2017Updated 9 years ago
- ZwProcessHollowing is a x64 process hollowing project which uses direct systemcalls, dll unhooking and RC4 payload decryption☆98Mar 23, 2023Updated 3 years ago
- Call 32bit NtDLL API directly from WoW64 Layer☆61Nov 18, 2020Updated 5 years ago
- Helper library for x86 programs that runs under WOW64 layer on x64 versions of Microsoft Windows operating systems.☆1,020Jan 17, 2023Updated 3 years ago
- proof-of-concept Windows Driver for injecting DLL into user-mode processes using APC☆1,298May 1, 2024Updated 2 years ago