Inject unsigned DLL into Protected Process Light (PPL)
☆41May 8, 2025Updated last year
Alternatives and similar repositories for PPLinject
Users that are interested in PPLinject are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆11Feb 19, 2023Updated 3 years ago
- A template programming library for Kernel Mode Windows drivers.☆13Jul 12, 2016Updated 10 years ago
- Convert native dll to shellcode, and support exported function☆24Feb 10, 2021Updated 5 years ago
- Kill Protected Process Light Process (include av)☆56Sep 15, 2023Updated 3 years ago
- Call NtCreateUserProcess directly as normal.☆78May 17, 2022Updated 4 years ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- 粗暴地枚举管理内核的WFP对象。 Manage kernel WFPs in a brutal way.☆24Jan 14, 2018Updated 8 years ago
- capemon: CAPE's monitor☆154Oct 23, 2026Updated last week
- RDP Credential Provider☆13Oct 29, 2025Updated last year
- This is the AV ("protection solution") used for my windows 10 rootkit main project. this includes the installer stager program, a service…☆13May 2, 2024Updated 2 years ago
- Basic implementation of Cobalt Strikes - User Defined Reflective Loader feature☆99Feb 28, 2023Updated 3 years ago
- 在Windows上建立一个开源的强制访问控制框架及SDK。使Windows平台的应用开发者，可以不用关心操作系统底层技术，只用进行简单的SDK调用或配置就可以保护自己的应用程序。☆33Jul 5, 2016Updated 10 years ago
- Change hash for a signed pe☆18Jul 18, 2023Updated 3 years ago
- Windows下进程保护项目，包含应用层和驱动层自保☆10Dec 8, 2021Updated 4 years ago
- Windows Kernel API wrapper with simplified functions and enterprise driver extensions.☆34Jul 8, 2025Updated last year
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- 卓然主动防御源码（可执行文件+完整源码+完整作品报告）☆14Mar 5, 2019Updated 7 years ago
- C# implementation of the process injection techniques dubbed "PoolParty"☆18Nov 7, 2025Updated 11 months ago
- Porting of BOF InlineExecute-Assembly to load .NET assembly in process but with patchless AMSI and ETW bypass using hardware breakpoint.☆307Jun 12, 2026Updated 4 months ago
- wv is a library which allows access to Microsoft Word files. It can load and parse Word 2000, 97, 95 and 6 file formats. (These are the f…☆18Apr 27, 2018Updated 8 years ago
- ☆18Aug 8, 2024Updated 2 years ago
- Self Cleanup in post-ex job☆59Sep 10, 2024Updated 2 years ago
- impersonate trustedinstaller by fiddling with tokens☆13Aug 30, 2021Updated 5 years ago
- Compile-time string crypter library for C++☆14May 7, 2021Updated 5 years ago
- 无模块注入工程 VS2008☆11Jul 23, 2018Updated 8 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- PTE hook☆36Jun 15, 2024Updated 2 years ago
- BasicEventViewer4 (BEV v4.0), this code will useful for All Blue/Purple Teams , RealTime Monitoring Sysmon Events , Mitre Attack Detectio…☆18Jun 22, 2023Updated 3 years ago
- A nim implementation of sRDI☆20Oct 18, 2023Updated 3 years ago
- 一个简单的 稳定 ICMP 传输 示例，在公网中传输可能有点慢，但很稳定，适合初学者☆12Mar 9, 2022Updated 4 years ago
- Tool designed to parse and analyze Microsoft Defender AV signature definition files☆13Apr 12, 2026Updated 6 months ago
- WinDumper is a Windows utility for resolving unexported ntdll.dll functions using portable AOB signatures.☆14Dec 30, 2025Updated 10 months ago
- ☆19Oct 3, 2021Updated 5 years ago
- Process Ghosting is a technique in which a process is created from a delete pending file. This means the created process is not backed by…☆18May 6, 2024Updated 2 years ago
- self cleaning CVE-2025-27591 Poc that grants a root reverse shell instead of modifying passwd files☆15Jun 28, 2026Updated 4 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- 大数字驱动逆向代码☆80Sep 12, 2026Updated last month
- ☆17Jan 14, 2026Updated 9 months ago
- StealthGuardian is a middleware layer that can be combined with adversary simulation tools to verify the resistance, detection level and…☆20Aug 7, 2024Updated 2 years ago
- Assemblyline 4 Malware detonation service (CAPEv2)☆13Oct 22, 2026Updated last week
- ☆14Nov 24, 2022Updated 3 years ago
- Use Rust to implement some Red Team techniques :)☆12Nov 11, 2024Updated last year
- first public in-process reflective PE loader for .NET NativeAOT binaries. maps a NativeAOT executable into the current process and execut…☆29Mar 28, 2026Updated 7 months ago