process-injection

There are 12 repositories under process-injection topic.

inceptor
klezVirus / inceptor
Template-Driven AV/EDR Evasion Framework
obfuscation pinvoke dinvoke code-injection process-injection av-bypass amsi-bypass av-evasion edr-bypass pe-packer amsi-evasion red-team red-teaming av-edr-bypass payload-generator
Language:Assembly 1745
thomasxm / BOAZ_beta
Multilayered AV/EDR Evasion Framework
boaz code-injection obfuscation av-bypass av-edr-bypass av-evasion edr-bypass etw-bypass payload-generator pe-packer process-injection red-teaming red-teaming-tools red-ream antivirus-evasion
Language:C++ 847
itaymigdal / awesome-injection
Centralized resource for listing and organizing known injection techniques and POCs
awesome-list process-injection
652
alphaSeclab / injection-stuff
PE Injection、DLL Injection、Process Injection、Thread Injection、Code Injection、Shellcode Injection、ELF Injection、Dylib Injection, including 400+Tools and 350+posts
code-injection dll-injection dylib-injection elf-injection pe-injection process-injection shellcode-injection thread-injection
555
Hagrid29 / PELoader
PE loader with various shellcode injection techniques
pe-loader process-hollowing process-injection dll malware payload pe-injector
Language:C++ 437
WesleyWong420 / RedTeamOps-Havoc-101
Materials for the workshop "Red Team Ops: Havoc 101"
active-directory av-evasion edr-bypass havoc opsec process-injection red-team-ops
Language:C# 387
christophetd / spoofing-office-macro
:fish: PoC of a VBA macro spawning a process with a spoofed parent and command line.
office-macro parent-process-spoofing windows-security process-injection windows-internals
Language:VBA 383
KooroshRZ / Windows-DLL-Injector
Some DLL Injection techniques in C++ implemented for both x86 and x64 windows OS processes
cpp dll-injection educational-project memory-hacking process-injection system-hacking windows
Language:C++ 341
ntqueueapcthreadex-ntdll-gadget-injection
LloydLabs / ntqueueapcthreadex-ntdll-gadget-injection
This novel way of using NtQueueApcThreadEx by abusing the ApcRoutine and SystemArgument[0-3] parameters by passing a random pop r32; ret gadget can be used for stealthy code injection.
process-injection shellcode shellcode-injection
Language:C 259
enkomio / ManagedInjector
A C# DLL injection library
csharp dll-injection dll-injector dotnet injection process-control process-injection process-injector reverse-engineering reversing
Language:C# 216
reveng007 / ReflectiveNtdll
A Dropper POC with a focus on aiding in EDR evasion, NTDLL Unhooking followed by loading ntdll in-memory, which is present as shellcode (using pe2shc by @hasherezade). Payload encryption via SystemFucntion033 NtApi and No new thread via Fiber
antivirus dropper edr evasion fiber implant malware ntdll-unhooking systemfunction033 process-injection bypass bypass-antivirus
Language:C 180
gh0x0st / wanderer
An open-source process injection enumeration tool written in C#
enumeration-tool offensive-security pen-300 process-injection security-tools
Language:C# 173
PI-Defender / pi-defender
Kernel Security driver used to block past, current and future process injection techniques on Windows Operating System.
anti-injection anti-malware antivirus blue-team defense driver kernel malware process-injection security windows
Language:C++ 154
tbhaxor / WinAPI-RedBlue
Source code of exploiting windows API for red teaming series
pentesteracademy pentester-academy windows windows-10 red-team blue-teams winapi win32api exploitation process-list process-injection
Language:C++ 150
buzzer-re / Shinigami
A dynamic unpacking tool
malware-analysis malware-detection malware-research process-injection reverse-engineering windows
Language:C++ 143
Konis-Bros / espio
Shellcode obfuscation tool to avoid AV/EDR.
antivirus-evasion cpp dll-unhooking obfuscation process-injection python
Language:C++ 130
voidvxvt / HellBunny
Malleable shellcode loader written in C and Assembly utilizing direct or indirect syscalls for evading EDR hooks
direct-syscalls edr-evasion indirect-syscalls maldev malware-development msvc native-api ntapi windows iat-camouflage payload-encryption process-injection edr-bypass api-hashing dll dll-sideloading shellcode-injection shellcode-loader
Language:C 129
ZeroMemoryEx / Shellcode-Injector
simple shellcode injector
process-hollowing process-injection red-team shellcode-injector
Language:C++ 117
neox41 / go-procinject
Process Injection Techniques with Golang
golang go process injection process-injection
Language:Go 81
Fatmike-GH / DLLInjectionDetector
A DLL Injection Detector for Windows.
anticheat api-hooking code-injection dll-injection dll-injection-detection exe-protection exe-protector hook hooking injection injection-attack injection-attacks process-injection reverse-engineering windows
Language:C++ 73
Kr0ff / WinMalDev
Various methods of executing shellcode
malware shellcode shellcode-runner process-injection shellcode-injection shellcode-loader windows
Language:C 72
itaymigdal / PartyLoader
Threadless shellcode injection tool
payload-generator process-injection threadless-injection
Language:Nim 67
0xlane / com-process-inject
Process Injection via Component Object Model (COM) IRundown::DoCallback().
process-injection rust windows process-injector redteam-tools
Language:Rust 61
itaymigdal / PichichiH0ll0wer
Nim process hollowing loader
edr-bypass edr-evasion loader payload-generator payload-injector pe-loader penetration-testing penetration-testing-tools process-hollowing process-injection red-team red-team-tools runpe syscalls
Language:Nim 60
Apr4h / GetInjectedThreads
C# Implementation of Jared Atkinson's Get-InjectedThread.ps1
incident-response memory-forensics blueteam process-injection
Language:C# 54
0dayNinja / Windows-x64-Processes-Injector
0day Windows/x64 Inject All Processes With Meterpreter Reverse Shell Shellcode (655 bytes)
0day windows process-injection meterpreter shell-code
Language:Assembly 51
redeflesq / firewall-bypass
PoC for downloading data by injecting into processes to evade firewalls
downloader firewall-bypass malware poc process-injection windows x86-64
Language:C 36
antifob / linux-prinj
Linux process injection PoCs
blueteam offensive-security process-injection
Language:C 30
En14c / Erebus
Poc for ELF64 runtime infection via GOT poisoning technique by elfmaster
linux linux-system-programming process-injection security virus elf64 elf-binaries elf c x64-assembly proof-of-concept
Language:C 30
Suredials / RUSTVERSARY
🦀 RUSTVERSARY: A comprehensive repository of tools and scripts for malware development practices.
cybersecurity enumeration ethical-hacking exploitation malware-development penetration-testing pentesting post-exploitation process-injection red-teaming rust security-tools windows-security
Language:Rust 30
Kara-4search / EarlyBirdInjection_CSharp
Inject shellcode into process via "EarlyBird"
earlybird shellcode injection process-injection edr redteam csharp bypass apc
Language:C# 26
Nero22k / Process-Injections-Techniques
Variety of different process injections implemented in C++
process-injection cpp malware evasion shellcode python3
Language:C++ 26
0xlane / process_ghosting
ProcessGhosting 技术的 rust 实现版本
pe-injection pe-injector pefile process-ghosting process-injection process-injector rust windows
Language:Rust 25
jayo78 / basic-hooking
Examples of basic windows API hooking techniques
hooking win32 winapi sandbox hacking api-hooking process-injection dll-injection
Language:C++ 20
Dos98 / ProcessInjectionTechniques
Learning Various Process Injection Techniques
dll dll-injection dll-hooking dll-injector process-injection atombombing thread
Language:C++ 17
zimnyaa / nim-noload-dll-hollowing
Unused DLL hollowing PoC in Nim
dll-hollowing evasion nim process-injection red-team syscalls
Language:Nim 17

process-injection

klezVirus / inceptor

thomasxm / BOAZ_beta

itaymigdal / awesome-injection

alphaSeclab / injection-stuff

Hagrid29 / PELoader

WesleyWong420 / RedTeamOps-Havoc-101

christophetd / spoofing-office-macro

KooroshRZ / Windows-DLL-Injector

LloydLabs / ntqueueapcthreadex-ntdll-gadget-injection

enkomio / ManagedInjector

reveng007 / ReflectiveNtdll

gh0x0st / wanderer

PI-Defender / pi-defender

tbhaxor / WinAPI-RedBlue

buzzer-re / Shinigami

Konis-Bros / espio

voidvxvt / HellBunny

ZeroMemoryEx / Shellcode-Injector

neox41 / go-procinject

Fatmike-GH / DLLInjectionDetector

Kr0ff / WinMalDev

itaymigdal / PartyLoader

0xlane / com-process-inject

itaymigdal / PichichiH0ll0wer

Apr4h / GetInjectedThreads

0dayNinja / Windows-x64-Processes-Injector

redeflesq / firewall-bypass

antifob / linux-prinj

En14c / Erebus

Suredials / RUSTVERSARY

Kara-4search / EarlyBirdInjection_CSharp

Nero22k / Process-Injections-Techniques

0xlane / process_ghosting

jayo78 / basic-hooking

Dos98 / ProcessInjectionTechniques

zimnyaa / nim-noload-dll-hollowing