process-injection

There are 11 repositories under process-injection topic.

inceptor
klezVirus / inceptor
Template-Driven AV/EDR Evasion Framework
obfuscation pinvoke dinvoke code-injection process-injection av-bypass amsi-bypass av-evasion edr-bypass pe-packer amsi-evasion red-team red-teaming av-edr-bypass payload-generator
Language:Assembly 1526
alphaSeclab / injection-stuff
PE Injection、DLL Injection、Process Injection、Thread Injection、Code Injection、Shellcode Injection、ELF Injection、Dylib Injection, including 400+Tools and 350+posts
pe-injection dll-injection process-injection thread-injection code-injection shellcode-injection elf-injection dylib-injection
491
christophetd / spoofing-office-macro
:fish: PoC of a VBA macro spawning a process with a spoofed parent and command line.
office-macro parent-process-spoofing windows-security process-injection windows-internals
Language:VBA 372
Hagrid29 / PELoader
PE loader with various shellcode injection techniques
pe-loader process-hollowing process-injection dll malware payload pe-injector
Language:C++ 351
KooroshRZ / Windows-DLL-Injector
Some DLL Injection techniques in C++ implemented for both x86 and x64 windows OS processes
dll-injection memory-hacking process-injection educational-project cpp system-hacking windows
Language:C++ 309
WesleyWong420 / RedTeamOps-Havoc-101
Materials for the workshop "Red Team Ops: Havoc 101"
active-directory av-evasion edr-bypass opsec process-injection red-team-ops havoc
Language:C# 308
ntqueueapcthreadex-ntdll-gadget-injection
LloydLabs / ntqueueapcthreadex-ntdll-gadget-injection
This novel way of using NtQueueApcThreadEx by abusing the ApcRoutine and SystemArgument[0-3] parameters by passing a random pop r32; ret gadget can be used for stealthy code injection.
process-injection shellcode shellcode-injection
Language:C 226
enkomio / ManagedInjector
A C# DLL injection library
dll-injection dll-injector injection reverse-engineering reversing dotnet process-injector process-injection process-control csharp
Language:C# 202
itaymigdal / awesome-injection
Centralized resource for listing and organizing known injection techniques and POCs
awesome-list process-injection
194
ZeroMemoryEx / Orca
Incomplete project
malware assembly risk win32api process-injection process-hollowing privilege-escalation shellcode-injection
Language:C++ 188
gh0x0st / wanderer
An open-source process injection enumeration tool written in C#
enumeration-tool offensive-security pen-300 process-injection security-tools
Language:C# 166
reveng007 / ReflectiveNtdll
A Dropper POC with a focus on aiding in EDR evasion, NTDLL Unhooking followed by loading ntdll in-memory, which is present as shellcode (using pe2shc by @hasherezade). Payload encryption via SystemFucntion033 NtApi and No new thread via Fiber
antivirus dropper edr evasion fiber implant malware ntdll-unhooking systemfunction033 process-injection bypass bypass-antivirus
Language:C 161
PI-Defender / pi-defender
Kernel Security driver used to block past, current and future process injection techniques on Windows Operating System.
anti-injection anti-malware antivirus blue-team defense driver kernel malware process-injection security windows
Language:C++ 148
tbhaxor / WinAPI-RedBlue
Source code of exploiting windows API for red teaming series
blue-teams exploitation pentester-academy pentesteracademy process-injection process-list red-team win32api winapi windows windows-10
Language:C++ 145
buzzer-re / Shinigami
A dynamic unpacking tool
malware-analysis malware-detection malware-research process-injection reverse-engineering windows
Language:C++ 123
ZeroMemoryEx / Shellcode-Injector
x64/x86 shellcode injector
process-injection shellcode-injector process-hollowing red-team
Language:C++ 113
Konis-Bros / espio
Shellcode obfuscation tool to avoid AV/EDR.
antivirus-evasion cpp dll-unhooking obfuscation process-injection python
Language:C++ 93
U-Boat
ZeroMemoryEx / U-Boat
Russian Wipers Dropper (educational-purposes )
dropper malware malware-development malware-research malware-sample process-injection win32api wiper
Language:C++ 81
neox41 / go-procinject
Process Injection Techniques with Golang
golang go process injection process-injection
Language:Go 77
Kr0ff / WinMalDev
Various methods of executing shellcode
malware shellcode shellcode-runner process-injection shellcode-injection shellcode-loader windows
Language:C 67
itaymigdal / PartyLoader
Threadless shellcode injection tool
payload-generator process-injection threadless-injection
Language:Nim 52
Apr4h / GetInjectedThreads
C# Implementation of Jared Atkinson's Get-InjectedThread.ps1
incident-response memory-forensics blueteam process-injection
Language:C# 50
0xlane / com-process-inject
Process Injection via Component Object Model (COM) IRundown::DoCallback().
process-injection rust windows process-injector redteam-tools
Language:Rust 48
0dayNinja / Windows-x64-Processes-Injector
0day Windows/x64 Inject All Processes With Meterpreter Reverse Shell Shellcode (655 bytes)
0day windows process-injection meterpreter shell-code
Language:Assembly 47
itaymigdal / PichichiH0ll0wer
Nim process hollowing loader
loader pe-loader penetration-testing penetration-testing-tools process-hollowing process-injection red-team red-team-tools syscalls payload-generator runpe payload-injector edr-bypass edr-evasion
Language:Nim 45
redeflesq / firewall-bypass
Download data from the internet bypassing the firewall using process injection
downloader firewall-bypass malware poc process-injection windows x86-64
Language:C 35
En14c / Erebus
Poc for ELF64 runtime infection via GOT poisoning technique by elfmaster
linux linux-system-programming process-injection security virus elf64 elf-binaries elf c x64-assembly proof-of-concept
Language:C 29
ZeroMemoryEx / CE_AC_CI_EX
Solving game hacking challenges (CE/AC) using ASM/C++
gamehacking memory-manipulation read-write-memory process-injection memory-hacking
Language:Assembly 29
Kara-4search / EarlyBirdInjection_CSharp
Inject shellcode into process via "EarlyBird"
earlybird shellcode injection process-injection edr redteam csharp bypass apc
Language:C# 23
0xlane / process_ghosting
ProcessGhosting 技术的 rust 实现版本
pe-injection pe-injector pefile process-ghosting process-injection process-injector rust windows
Language:Rust 22
antifob / linux-prinj
Linux process injection PoCs
blueteam offensive-security process-injection
Language:C 21
Nero22k / Process-Injections-Techniques
Variety of different process injections implemented in C++
process-injection cpp malware evasion shellcode python3
Language:C++ 21
Dos98 / ProcessInjectionTechniques
Learning Various Process Injection Techniques
dll dll-injection dll-hooking dll-injector process-injection atombombing thread
Language:C++ 20
ivkin25 / Process-Hollowing
An implementation of the Process Hollowing technique.
process-hollowing runpe process-injection
Language:C++ 16
jayo78 / basic-hooking
Examples of basic windows API hooking techniques
hooking win32 winapi sandbox hacking api-hooking process-injection dll-injection
Language:C++ 15
zimnyaa / nim-noload-dll-hollowing
Unused DLL hollowing PoC in Nim
red-team process-injection syscalls dll-hollowing evasion nim
Language:Nim 15

process-injection

klezVirus / inceptor

alphaSeclab / injection-stuff

christophetd / spoofing-office-macro

Hagrid29 / PELoader

KooroshRZ / Windows-DLL-Injector

WesleyWong420 / RedTeamOps-Havoc-101

LloydLabs / ntqueueapcthreadex-ntdll-gadget-injection

enkomio / ManagedInjector

itaymigdal / awesome-injection

ZeroMemoryEx / Orca

gh0x0st / wanderer

reveng007 / ReflectiveNtdll

PI-Defender / pi-defender

tbhaxor / WinAPI-RedBlue

buzzer-re / Shinigami

ZeroMemoryEx / Shellcode-Injector

Konis-Bros / espio

ZeroMemoryEx / U-Boat

neox41 / go-procinject

Kr0ff / WinMalDev

itaymigdal / PartyLoader

Apr4h / GetInjectedThreads

0xlane / com-process-inject

0dayNinja / Windows-x64-Processes-Injector

itaymigdal / PichichiH0ll0wer

redeflesq / firewall-bypass

En14c / Erebus

ZeroMemoryEx / CE_AC_CI_EX

Kara-4search / EarlyBirdInjection_CSharp

0xlane / process_ghosting

antifob / linux-prinj

Nero22k / Process-Injections-Techniques

Dos98 / ProcessInjectionTechniques

ivkin25 / Process-Hollowing

jayo78 / basic-hooking

zimnyaa / nim-noload-dll-hollowing