Hello-xBugs / transacted_hollowing

Transacted Hollowing - a PE injection technique, hybrid between ProcessHollowing and ProcessDoppelgänging

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Transacted Hollowing

Build status

Transacted Hollowing - a PE injection technique. A hybrid between Process Hollowing and Process Doppelgänging.

More info here

Supported injections:

If the loader was built as 32 bit:

32 bit payload -> 32 bit target

If the loader was built as 64 bit:

64 bit payload -> 64 bit target
32 bit payload -> 32 bit target

How to use the app:

Supply 2 commandline arguments:

[payload_path] [target_path]

Payload is the PE to be executed impersonating the Target.

About

Transacted Hollowing - a PE injection technique, hybrid between ProcessHollowing and ProcessDoppelgänging

License:MIT License


Languages

Language:C 86.5%Language:C++ 13.1%Language:CMake 0.4%