infosecx0 / persistence_demos

Demos of various (also non standard) persistence methods used by malware

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

persistence_demos

  • com_hijack - loads a demo DLL via COM hijacking
  • extension_hijack - hijacks extensions handlers in order to run a demo app while the file with the given extension is opened
  • shim_persist - installs a shim that injects a demo DLL into explorer.exe

About

Demos of various (also non standard) persistence methods used by malware


Languages

Language:C++ 94.1%Language:CMake 4.1%Language:C 1.6%Language:Batchfile 0.2%