process-hollowing

Process Herpaderping proof of concept, tool, and technical deep dive. Process Herpaderping bypasses security products by obscuring the intentions of a process.

Demos of various injection techniques found in malware

Penetration testing utility and antivirus assessment tool.

A more stealthy variant of "DLL hollowing"

PE loader with various shellcode injection techniques

Advanced Malware with multifeatures written in ASM/C/C++ , work on all windows versions ! (uncompleted)

x64/x86 shellcode injector

Various Process Injection Techniques

userland exec for Linux x86_64

execute a PE in the address space of another PE aka process hollowing

This script is used to bypass DLL Hooking using a fresh mapped copy of ntdll file, patch the ETW and trigger a shellcode with process hollowing

RunPE using Hell's Gate technique.

Herpaderply Hollowing - a PE injection technique, hybrid between Process Hollowing and Process Herpaderping

An implementation of the Process Hollowing technique.

A shellcode runner / injector / hollower in Go, for windows

Lime Crypter Obfuscator Mod

Execution of the malicious code is masked under a legitimate process.

process hollowing variant using NtCreateSection + NtMapViewOfSection + ResumeThread

Malware droppers written in multiple languages.

userland exec for Linux ARM v7