Process Ghosting - a PE injection technique, similar to Process Doppelgänging, but using a delete-pending file instead of a transacted file
-
Updated
Mar 11, 2024 - C
#
pe-injection
Here are 10 public repositories matching this topic...
PE Injection、DLL Injection、Process Injection、Thread Injection、Code Injection、Shellcode Injection、ELF Injection、Dylib Injection, including 400+Tools and 350+posts
dll-injection code-injection thread-injection process-injection dylib-injection shellcode-injection pe-injection elf-injection
-
Updated
May 25, 2020
execute PE in memory Filelessly
pe-loader redteam-tools pe-injection fileless-attack evade-av redteaming-tools fileless-malware pe-file-injector python-pe-injector fileless-pe-injector
-
Updated
Feb 8, 2025 - Python
ProcessGhosting 技术的 rust 实现版本
-
Updated
Oct 23, 2024 - Rust
PE File Code Cave Helper (Backdooring and/or Basic Section Obfuscation)
-
Updated
Nov 9, 2020 - Python
Sample code for pe injection.
-
Updated
Jul 8, 2020 - C++
Windows malware training and development.
-
Updated
Nov 7, 2024 - Assembly
Explanation and POC of the Process Hollowing (Windows) technique, commonly used by malware to bypass security systems
-
Updated
Feb 28, 2025 - C++
An wrapper app calling a child subprocess, allowing to ignore its crashes. Useful for building software with buggy tools
cmake assembly x86-64 winapi x86 i386 ia32 payload createremotethread writeprocessmemory ia32-assembly pe-injection position-independent-code seterrormode windows-error-report add-custom-command
-
Updated
Oct 30, 2020 - C
Improve this page
Add a description, image, and links to the pe-injection topic page so that developers can more easily learn about it.
Add this topic to your repo
To associate your repository with the pe-injection topic, visit your repo's landing page and select "manage topics."