7 results found Sort:

hasherezade
process_ghosting hasherezade
114
632
mit
12
Process Ghosting - a PE injection technique, similar to Process Doppelgänging, but using a delete-pending file instead of a transacted file
pefile pe-injector pe-injection
Created 2021-06-16
24 commits to master branch, last one 9 months ago
hasherezade
process_doppelganging hasherezade
116
582
unknown
19
My implementation of enSilo's Process Doppelganging (PE injection technique)
malware pe-injector process-doppelganging
Created 2017-12-16
33 commits to master branch, last one 2 years ago
hasherezade
transacted_hollowing hasherezade
75
521
mit
19
Transacted Hollowing - a PE injection technique, hybrid between ProcessHollowing and ProcessDoppelgänging
pefile malware pe-injector code-injection
Created 2021-06-05
33 commits to main branch, last one 9 months ago
Hagrid29
PELoader Hagrid29
58
388
unknown
9
PE loader with various shellcode injection techniques
dll malware payload pe-loader pe-injector process-hollowing process-injection
Created 2022-02-10
16 commits to main branch, last one 2 years ago
hasherezade
module_overloading hasherezade
56
338
unknown
10
A more stealthy variant of "DLL hollowing"
pe-injector process-hollowing
Created 2019-11-10
46 commits to master branch, last one 9 months ago
hasherezade
chimera_pe hasherezade
58
217
unknown
12
ChimeraPE (a PE injector type - alternative to: RunPE, ReflectiveLoader, etc) - a template for manual loading of EXE, loading imports payload-side
runpe pe-injector reflectiveloader
Created 2017-01-24
25 commits to master branch, last one about a year ago
Hagrid29
herpaderply_hollowing Hagrid29
11
45
unknown
4
Herpaderply Hollowing - a PE injection technique, hybrid between Process Hollowing and Process Herpaderping
pefile malware pe-loader pe-injector code-injection process-hollowing
Created 2022-10-07
4 commits to main branch, last one 2 years ago