sunsided / native-dotnet-code-injectionLinks
Injection of managed code into non-managed Windows applications
☆28Updated 6 years ago
Alternatives and similar repositories for native-dotnet-code-injection
Users that are interested in native-dotnet-code-injection are comparing it to the libraries listed below
Sorting:
- ps-like .NET Assembly for enumerating processes on the current machine or a remote machine.☆13Updated 6 years ago
- Pinjectra is a C/C++ OOP-like library that implements Process Injection techniques (with focus on Windows 10 64-bit)☆16Updated 5 years ago
- A .NET tool that uses AppDomain's to enable dynamic execution and escape detection.☆29Updated 6 years ago
- ☆33Updated 6 years ago
- Windows Process Injection Toolkit - plain and simple :)☆28Updated 7 years ago
- C# code to run PIC using CreateThread☆17Updated 6 years ago
- ☆26Updated 7 years ago
- C++ DLL Bootstrapper for spinning up the CLR for C# Payloads☆44Updated 6 years ago
- Arya is a simple obfuscator for .NET binaries.☆38Updated 8 years ago
- ☆42Updated 6 years ago
- PoC: Prevent a debugger from attaching to managed .NET processes via a watcher process code pattern.☆32Updated 7 years ago
- medium-rare☆28Updated 6 years ago
- Bare template for a Kernel Mode Driver☆51Updated 5 years ago
- Inject .Net payloads into other .Net assemblies on disk☆61Updated 6 years ago
- Run Managed Assemblies with RunDll☆17Updated 7 years ago
- ☆45Updated 7 years ago
- Protects and logs suspicious and malicious usage of .NET CSC.exe and Runtime C# Compilation☆25Updated 7 years ago
- Proof of concept - Covert Channel using Windows Filtering Platform (C#)☆21Updated 4 years ago
- Automate AV evasion by calling AMSI☆88Updated 2 years ago
- A tool to create COM class/interface relationships in neo4j☆50Updated 3 years ago
- Uses WMI Event Win32_ModuleLoadTrace to monitor module loading. Provides filters, and detailed data. Has an option to monitor for CLR Inj…☆42Updated 6 years ago
- A repository where I share my injection implemintations☆29Updated 5 years ago
- C# Implementation of Jared Atkinson's Get-InjectedThread.ps1☆53Updated 4 years ago
- A spiritual .NET equivalent to the Gargoyle memory scanning evasion technique☆52Updated 7 years ago
- ☆28Updated 8 years ago
- A C++ POC for process injection using NtCreateSectrion, NtMapViewOfSection and RtlCreateUserThread. Credit to @spotheplanet for his notes…☆45Updated 4 years ago
- An example pattern in C# for using WMI to monitor process creation and termination events.☆53Updated 7 years ago
- Antivirus Emulator Fingerprints☆30Updated 7 years ago
- Extract the password of the current user from flow (keylogger, config file, ..) Use SSPI to get a valid NTLM challenge/response and test …☆59Updated 6 years ago
- Library of tools and examples for loading/bootstrapping managed code from unmanaged code in .NET☆64Updated 6 years ago