A Windows PE format file loader
☆159Jun 1, 2018Updated 8 years ago
Alternatives and similar repositories for pe-loader
Users that are interested in pe-loader are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Windows 10 PE image loader (LDR) NTDLL component toolbox☆51Oct 22, 2019Updated 7 years ago
- Run a Exe File (PE Module) in memory (like an Application Loader)☆941Mar 28, 2021Updated 5 years ago
- Headers for linking your software with ntdll.dll☆15Nov 4, 2020Updated 5 years ago
- A library to load, manipulate, dump PE files. See also: https://github.com/hasherezade/libpeconv_tpl☆1,395Apr 18, 2026Updated 6 months ago
- Proof of concept implementation of in-memory PE Loader based on ReflectiveDLLInjection Technique☆160Oct 29, 2018Updated 8 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- In-Memory PE Loader☆375Oct 7, 2019Updated 7 years ago
- Win32 PE Anti-RE and Anti-debugging Framework☆13May 14, 2019Updated 7 years ago
- Windows PE - TLS (Thread Local Storage) Injector in C/C++☆108Jan 3, 2021Updated 5 years ago
- POC of PPID spoofing using NtCreateUserProcess with syscalls to create a suspended process and performing process injection by overwritti…☆41Sep 23, 2021Updated 5 years ago
- Public Release☆16Mar 27, 2019Updated 7 years ago
- Original C Implementation of the Hell's Gate VX Technique☆1,223Jun 28, 2021Updated 5 years ago
- Freeze is a payload toolkit for bypassing EDRs using suspended processes, direct syscalls, and alternative execution methods☆13Sep 30, 2022Updated 4 years ago
- ☆21May 28, 2021Updated 5 years ago
- Phantom DLL Hollowing method implemented in modmap☆18Jun 9, 2021Updated 5 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Injection of MSIL using Cecil☆12Jul 28, 2015Updated 11 years ago
- ☆60Jan 9, 2023Updated 3 years ago
- A Hobbyist Operating System based off the ReactOS/NT Kernel experimenting with OS Development.☆31Jul 29, 2012Updated 14 years ago
- My implementation of enSilo's Process Doppelganging (PE injection technique)☆649Aug 30, 2022Updated 4 years ago
- Windows System Programming Experiments☆223Jun 13, 2022Updated 4 years ago
- Add an empty section to a PE file☆53Aug 8, 2017Updated 9 years ago
- Hide .Net assembly into png images☆35Aug 11, 2019Updated 7 years ago
- Simple 32/64-bit PEs loader.☆141Dec 19, 2018Updated 7 years ago
- A more stealthy variant of "DLL hollowing"☆369Mar 8, 2024Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Simple project that demonstrates how an ETW consumer can be created just by using NTDLL☆154Feb 23, 2019Updated 7 years ago
- Finding Truth in the Shadows☆127Jan 26, 2023Updated 3 years ago
- Rust Weaponization for Red Team Engagements.☆16Oct 9, 2021Updated 5 years ago
- A multi-staged malware that contains a kernel mode rootkit and a remote system shell.☆72May 20, 2021Updated 5 years ago
- PE(compressed dll) memory loader using nt api☆46Jul 3, 2017Updated 9 years ago
- I used this to see if an EDR is running in Safe Mode☆33Feb 13, 2021Updated 5 years ago
- A crappy hook on SpAcceptLsaModeContext that prints incoming auth attempts. WIP☆37Jul 27, 2021Updated 5 years ago
- ☆14Oct 14, 2016Updated 10 years ago
- ☆12May 31, 2023Updated 3 years ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- Defeating Patchguard universally for Windows 8, Windows 8.1 and all versions of Windows 10 regardless of HVCI.☆916Nov 21, 2019Updated 6 years ago
- Dynamic COFF object loader☆23Jun 29, 2018Updated 8 years ago
- Windows Kernel Programming Experiments☆84Sep 18, 2022Updated 4 years ago
- https://blog.f-secure.com/hiding-malicious-code-with-module-stomping/☆125Sep 19, 2019Updated 7 years ago
- Reflective PE loader for DLL injection☆184Oct 12, 2017Updated 9 years ago
- Silence EDRs by removing kernel callbacks☆236Dec 7, 2020Updated 5 years ago
- Two C# RunPE's capable of x86 and x64 injections☆10Dec 2, 2018Updated 7 years ago