#

process-hollowing

Here are 29 public repositories matching this topic...

bediger4000 / userlandexec-arm

userland exec for Linux ARM v7

linux elf arm-assembly usrland-exec process-hollowing

Updated Jul 19, 2017
C

TheKevinWang / HellsRunPE

RunPE using Hell's Gate technique.

loader process-hollowing runpe

Updated Dec 4, 2020
C

EmreOvunc / Process-Injection-Process-Hollowing-T1055.012

Execution of the malicious code is masked under a legitimate process.

process-hollowing process-injection t1055

Updated Dec 11, 2020
C++

ivkin25 / Process-Hollowing

An implementation of the Process Hollowing technique.

process-hollowing runpe process-injection

Updated Dec 13, 2020
C++

abdullah2993 / go-runpe

execute a PE in the address space of another PE aka process hollowing

injection evasion malware-development process-hollowing runpe process-holl

Updated Dec 2, 2021
Go

rxOred / process-hollowing

process hollowing variant using NtCreateSection + NtMapViewOfSection + ResumeThread

malware process-hollowing

Updated Jan 9, 2022
C++

hasherezade / demos

Demos of various injection techniques found in malware

malware dll-injection code-injection process-hollowing runpe

Updated Feb 15, 2022
C

HadiMed / Hollow

Implementation of process hollowing on x32 .

reverse-engineering malware loader code-injection process-hollowing runpe hollowing

Updated Feb 19, 2022
C

bediger4000 / userlandexec

userland exec for Linux x86_64

x86-64 elf system-calls process-hollowing userland-exec

Updated May 7, 2022
C

ChrisPritchard / golang-shellcode-runner

A shellcode runner / injector / hollower in Go, for windows

ntdll process-hollowing kernel32 shellcode-injection

Updated May 22, 2022
Go

MahmoudZohdy / Process-Injection-Techniques

Various Process Injection Techniques

injection dll-injection process-hollowing process-doppelganging early-bird shellcode-injection thread-hijacking tls-injection apc-injection appcertdlls appinit-dlls image-file-execution-options process-ghosting reflective-dll-injection

Updated Jun 14, 2022
C++

ZeroMemoryEx / Shellcode-Injector

x64/x86 shellcode injector

red-team process-hollowing shellcode-injector process-injection

Updated Aug 4, 2022
C++

Hagrid29 / herpaderply_hollowing

Herpaderply Hollowing - a PE injection technique, hybrid between Process Hollowing and Process Herpaderping

pefile malware pe-loader code-injection pe-injector process-hollowing

Updated Oct 9, 2022
C

Hagrid29 / PELoader

PE loader with various shellcode injection techniques

dll malware payload pe-loader pe-injector process-hollowing process-injection

Updated Oct 17, 2022
C++

xiosec / Hollow

Hollow is a tool for implementing the process hollowing technique.

windows internals process-hollowing redteaming redteam windows-internals

Updated Jan 24, 2023
C#

ivan-sincek / malware-droppers

Custom malware droppers written in multiple languages.

windows c-sharp security visual-studio encoder decoder reverse-engineering malware penetration-testing offensive-security ethical-hacking mimikatz red-team-engagement process-hollowing defensive-security windows-penetration-testing

Updated Feb 4, 2023
C#

XaFF-XaFF / ZwProcessHollowing

ZwProcessHollowing is a x64 process hollowing project which uses direct systemcalls, dll unhooking and RC4 payload decryption

windows x64 hacking-tool process-hollowing runpe

Updated Mar 23, 2023
C++

ivan-sincek / invoker

Penetration testing utility and antivirus assessment tool.

Updated Apr 25, 2023
C++

jxy-s / herpaderping

Process Herpaderping proof of concept, tool, and technical deep dive. Process Herpaderping bypasses security products by obscuring the intentions of a process.

windows security exploit windows-10 exploits vulnerability antivirus security-vulnerability exploitation windows-7 antivirus-evasion process-hollowing windows-defender exploit-development process-doppelganging exploit-framework process-migration process-herpaderping

Updated Jul 5, 2023
C++

Logan-Elliott / HollowGhost

Process hollowing C# shellcode runner that is FUD against Microsoft Defender as of October 7, 2023.

injection runner penetration-testing defender shellcode red-team fud antivirus-evasion process-hollowing

Updated Oct 8, 2023
C#

Improve this page

Add a description, image, and links to the process-hollowing topic page so that developers can more easily learn about it.

Curate this topic

Add this topic to your repo

To associate your repository with the process-hollowing topic, visit your repo's landing page and select "manage topics."