sbousseaden / injection-1Links
Windows process injection methods
☆18Updated 6 years ago
Alternatives and similar repositories for injection-1
Users that are interested in injection-1 are comparing it to the libraries listed below
Sorting:
- ☆70Updated 8 months ago
- A Practical example of ELAM (Early Launch Anti-Malware)☆35Updated 3 years ago
- ☆36Updated 3 years ago
- ☆62Updated 3 years ago
- ☆84Updated 3 years ago
- Clone running process with ZwCreateProcess☆58Updated 4 years ago
- A novel technique to communicate between threads using the standard ETHREAD structure☆114Updated 4 years ago
- ☆83Updated last year
- Weaponizing Gigabyte driver for priv escalation and bypass PPL☆69Updated 6 years ago
- ☆84Updated last year
- A modified RunPE (process hollowing) technique avoiding the usage of SetThreadContext by appending a TLS section which calls the original…☆98Updated 6 years ago
- Get-PDInvokeImports is tool (PowerShell module) which is able to perform automatic detection of P/Invoke, Dynamic P/Invoke and D/Invoke u…☆54Updated 3 years ago
- x64 Registration-Free In-Process COM Automation Server.☆50Updated 2 years ago
- ☆33Updated last year
- A PoC tool for exploiting leaked process and thread handles☆32Updated last year
- Inter-Process Communication Mechanisms☆28Updated 5 years ago
- APC DLL Injector with NtQueueApcThread and wake up thread support☆47Updated 8 years ago
- Use NT Native Registry API to create a registry that normal user can not query.☆94Updated 7 years ago
- ☆25Updated last year
- Bypass UAC elevation on Windows 8 (build 9600) & above.☆57Updated 3 years ago
- Sysmon shenanigans☆66Updated 5 years ago
- really ?☆12Updated last year
- Interceptor is a kernel driver focused on tampering with EDR/AV solutions in kernel space☆124Updated 2 years ago
- SharpASM is a C# project that aims to automate ASM (i.e. shellcode) execution in .NET programs by exploiting code caves in RWX sections a…☆58Updated 3 years ago
- A PoC for adding NtContinue to CFG allowed list in order to make Ekko work in a CFG protected process☆106Updated 3 years ago
- Piece of code to detect and remove hooks in IAT☆64Updated 3 years ago
- ☆41Updated 4 years ago
- A small commented POC for removing API hooks placed by AV/EDR.☆34Updated 5 years ago
- Monitors ETW for security relevant syscalls maintaining the set called by each unique process☆83Updated 2 years ago
- Former Multi - Ring to Kernel To UserMode Transitional Shellcode For Remote Kernel Exploits☆31Updated 3 years ago