There are 12 repositories under process-injection topic.
Centralized resource for listing and organizing known injection techniques and POCs
PE Injection、DLL Injection、Process Injection、Thread Injection、Code Injection、Shellcode Injection、ELF Injection、Dylib Injection, including 400+Tools and 350+posts
Materials for the workshop "Red Team Ops: Havoc 101"
:fish: PoC of a VBA macro spawning a process with a spoofed parent and command line.
Some DLL Injection techniques in C++ implemented for both x86 and x64 windows OS processes
This novel way of using NtQueueApcThreadEx by abusing the ApcRoutine and SystemArgument[0-3] parameters by passing a random pop r32; ret gadget can be used for stealthy code injection.
A C# DLL injection library
A Dropper POC with a focus on aiding in EDR evasion, NTDLL Unhooking followed by loading ntdll in-memory, which is present as shellcode (using pe2shc by @hasherezade). Payload encryption via SystemFucntion033 NtApi and No new thread via Fiber
Kernel Security driver used to block past, current and future process injection techniques on Windows Operating System.
Source code of exploiting windows API for red teaming series
Shellcode obfuscation tool to avoid AV/EDR.
Malleable shellcode loader written in C and Assembly utilizing direct or indirect syscalls for evading EDR hooks
simple shellcode injector
Process Injection Techniques with Golang
A DLL Injection Detector for Windows.
Threadless shellcode injection tool
Process Injection via Component Object Model (COM) IRundown::DoCallback().
Nim process hollowing loader
C# Implementation of Jared Atkinson's Get-InjectedThread.ps1
0day Windows/x64 Inject All Processes With Meterpreter Reverse Shell Shellcode (655 bytes)
PoC for downloading data by injecting into processes to evade firewalls
🦀 RUSTVERSARY: A comprehensive repository of tools and scripts for malware development practices.
Inject shellcode into process via "EarlyBird"
Variety of different process injections implemented in C++
ProcessGhosting 技术的 rust 实现版本
Examples of basic windows API hooking techniques
Learning Various Process Injection Techniques
Unused DLL hollowing PoC in Nim