sbousseaden / injection-1Links
Windows process injection methods
☆19Updated 6 years ago
Alternatives and similar repositories for injection-1
Users that are interested in injection-1 are comparing it to the libraries listed below
Sorting:
- ☆70Updated 11 months ago
- ☆85Updated 4 years ago
- ☆37Updated 4 years ago
- ☆83Updated last year
- Sysmon shenanigans☆66Updated 5 years ago
- ☆89Updated last year
- Clone running process with ZwCreateProcess☆59Updated 5 years ago
- A Practical example of ELAM (Early Launch Anti-Malware)☆36Updated 4 years ago
- Weaponizing Gigabyte driver for priv escalation and bypass PPL☆70Updated 6 years ago
- ☆62Updated 3 years ago
- Six cases demonstrating methods of optimizing GetProcAddress☆18Updated 4 years ago
- Get-PDInvokeImports is tool (PowerShell module) which is able to perform automatic detection of P/Invoke, Dynamic P/Invoke and D/Invoke u…☆54Updated 3 years ago
- Piece of code to detect and remove hooks in IAT☆65Updated 3 years ago
- Inter-Process Communication Mechanisms☆28Updated 5 years ago
- ☆28Updated 2 years ago
- Windows API Hashes used in the malwares☆42Updated 10 years ago
- A PoC tool for exploiting leaked process and thread handles☆32Updated last year
- A PoC for adding NtContinue to CFG allowed list in order to make Ekko work in a CFG protected process☆113Updated 3 years ago
- APC DLL Injector with NtQueueApcThread and wake up thread support☆49Updated 8 years ago
- A novel technique to communicate between threads using the standard ETHREAD structure☆115Updated 4 years ago
- A modified RunPE (process hollowing) technique avoiding the usage of SetThreadContext by appending a TLS section which calls the original…☆97Updated 6 years ago
- ☆118Updated 3 years ago
- Bypass UAC elevation on Windows 8 (build 9600) & above.☆57Updated 3 years ago
- Former Multi - Ring to Kernel To UserMode Transitional Shellcode For Remote Kernel Exploits☆31Updated 3 years ago
- A class to emulate the behavior of NtQuerySystemInformation when passed the SystemHypervisorDetailInformation information class☆27Updated 2 years ago
- An command-line RPC method enumerator, born out of RPCView's awesomeness☆108Updated 6 years ago
- ☆42Updated 4 years ago
- Enabled / Disable LSA Protection via BYOVD☆81Updated 4 years ago
- A Poc on blocking Procmon from monitoring network events☆111Updated 5 months ago
- SharpASM is a C# project that aims to automate ASM (i.e. shellcode) execution in .NET programs by exploiting code caves in RWX sections a…☆59Updated 3 years ago