joren485/HollowProcess external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

joren485/HollowProcess

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/joren485/HollowProcess)

Close

joren485 / HollowProcessView on GitHubMore

• External links
• Readme badge

Hollow Process / Dynamic Forking / RunPE injection technique implemented in Python

☆54Jun 18, 2021Updated 4 years ago

Alternatives and similar repositories for HollowProcess

Users that are interested in HollowProcess are comparing it to the libraries listed below

• rvrsh3ll / UACSilentCleanup

  View on GitHub
  ☆14Sep 22, 2019Updated 6 years ago
• brianwrf / CVE-2017-4878-Samples

  View on GitHub
  CVE-2017-4878 Samples - http://blog.talosintelligence.com/2018/02/group-123-goes-wild.html
  ☆18Feb 5, 2018Updated 8 years ago
• 3gstudent / Use-COM-objects-to-bypass-UAC

  View on GitHub
  ☆92Apr 17, 2021Updated 4 years ago
• guidoreina / http_inspect

  View on GitHub
  HTTP/HTTPS/DNS inspector (windows driver)
  ☆27Feb 20, 2019Updated 7 years ago
• operatorequals / SMBRat

  View on GitHub
  A Windows Remote Administration Tool in Visual Basic with UNC paths
  ☆23Apr 19, 2019Updated 6 years ago
• cxz456999 / Win32ApiHookDetector

  View on GitHub
  Win32 API Hook偵測
  ☆10Oct 1, 2017Updated 8 years ago
• vysecurity / EmpireAMSI

  View on GitHub
  ☆13Jun 1, 2021Updated 4 years ago
• Dankirk / RegSLScan

  View on GitHub
  A tool for scanning registery key permissions. Find where non-admins can create symbolic links.
  ☆45Oct 30, 2019Updated 6 years ago
• TeamT5 / ShimcacheParser

  View on GitHub
  A simple parser(library) which extracts shimcache data from windows.
  ☆15May 20, 2019Updated 6 years ago
• usertoroot / StealthInject

  View on GitHub
  This tool allows you to stealthily inject a DLL into a process.
  ☆14Jul 11, 2015Updated 10 years ago
• ambray / ProcessHollowing

  View on GitHub
  Simple Process Hollowing in C#
  ☆68Oct 23, 2017Updated 8 years ago
• emc2314 / PEZEncrypt

  View on GitHub
  PE Infector/Cryptor source code
  ☆16Apr 30, 2017Updated 8 years ago
• oguzpamuk / HuntingWithPowershell

  View on GitHub
  Windows log and threat hunting with powershell
  ☆16Dec 11, 2020Updated 5 years ago
• stonedreamforest / ChangCheng

  View on GitHub
  对windows-api内容进行自动审查和过滤监控
  ☆15May 30, 2017Updated 8 years ago
• irsl / CVE-2020-0728

  View on GitHub
  Proof of Concept code for CVE-2020-0728
  ☆47Feb 12, 2020Updated 6 years ago
• umarfarook882 / CVE-2019-0708

  View on GitHub
  CVE-2019-0708 - BlueKeep (RDP)
  ☆40Jun 14, 2020Updated 5 years ago
• landhb / MemScan-1.0

  View on GitHub
  Scan and edit memory using WinAPI functions such as ReadProcessMemory and WriteProcessMemory
  ☆50Sep 25, 2017Updated 8 years ago
• james0x40 / CVE-2020-0624

  View on GitHub
  win32k use-after-free poc
  ☆71Apr 22, 2020Updated 5 years ago
• swwwolf / cbtest

  View on GitHub
  Windows kernel-mode callbacks tutorial driver
  ☆48Aug 8, 2016Updated 9 years ago
• w1nds / ishellcode

  View on GitHub
  shellcode注入测试工具
  ☆52Aug 5, 2019Updated 6 years ago
• benpturner / Invoke-DCOM

  View on GitHub
  C# DCOM Execution
  ☆17Aug 4, 2019Updated 6 years ago
• alanbaumgartner / Aurora

  View on GitHub
  Aurora Remote Administration Tool
  ☆20Apr 16, 2018Updated 7 years ago
• coffeehb / DNS-Monitor

  View on GitHub
  ☆16Feb 26, 2018Updated 8 years ago
• NtRaiseHardError / UnRunPE

  View on GitHub
  PoC for detecting and dumping process hollowing code injection
  ☆52Oct 23, 2018Updated 7 years ago
• peleghd / Windows-10-Exploitation

  View on GitHub
  ☆135Dec 15, 2019Updated 6 years ago
• freesoul / netstub

  View on GitHub
  Create a C++ PE which loads an XTEA-crypted .NET PE shellcode in memory.
  ☆17Sep 29, 2018Updated 7 years ago
• stonedreamforest / re_avdevprot

  View on GitHub
  逆向小红伞杀毒软件驱动——avdevprot
  ☆24Dec 3, 2017Updated 8 years ago
• Spajed / processrefund

  View on GitHub
  An attempt at Process Doppelgänging
  ☆183Dec 21, 2017Updated 8 years ago
• Tadas / PSNamedPipes

  View on GitHub
  Asynchronous named pipe module for PowerShell
  ☆21May 30, 2016Updated 9 years ago
• hoangprod / COMHijacker

  View on GitHub
  Persistent through COM Hijacking
  ☆22Jan 15, 2019Updated 7 years ago
• Intrus1ve / Runpe-ProcessHollowing

  View on GitHub
  Fud Runpe Av Evasion / All Av Bypass
  ☆32Feb 24, 2023Updated 3 years ago
• RedyOpsResearchLabs / SEP-14.2-Arbitrary-Write

  View on GitHub
  CVE-2020-5837 exploit
  ☆43May 13, 2020Updated 5 years ago
• lesnuages / go-execute-assembly

  View on GitHub
  Allow a Go process to dynamically load .NET assemblies
  ☆150Mar 28, 2020Updated 5 years ago
• wirepair / IDAPinLogger

  View on GitHub
  Logs instruction hits to a file which can be fed into IDA Pro to highlight which instructions were called.
  ☆42Jul 5, 2013Updated 12 years ago
• b4rtik / HiddenPowerShellDll

  View on GitHub
  ☆94Nov 16, 2018Updated 7 years ago
• sailay1996 / CVE-2025-53772

  View on GitHub
  poc for cve-2025-53772
  ☆46Dec 10, 2025Updated 2 months ago
• Devolutions / RdpCredProv

  View on GitHub
  RDP Credential Provider
  ☆11Oct 29, 2025Updated 4 months ago
• rvrsh3ll / Word-Doc-Video-Embed-EXE-POC

  View on GitHub
  ☆93Nov 1, 2018Updated 7 years ago
• debasishm89 / dotNetFuzz

  View on GitHub
  A quick and dirty .NET "Deserialize_*" fuzzer based on James Forshaw's (@tiraniddo) DotNetToJScript.
  ☆42Nov 10, 2018Updated 7 years ago