A VBA implementation of the RunPE technique or how to bypass application whitelisting.
Demos of various injection techniques found in malware
pure-python implementation of MemoryModule technique to load dll and unmanaged exe entirely from memory
Telegram: @siriusdeveloper
ChimeraPE (a PE injector type - alternative to: RunPE, ReflectiveLoader, etc) - a template for manual loading of EXE, loading imports payload-side
Tool to evade Antivirus With Different Techniques
Process Hollowing in C++ (x86 / x64) - Process PE image replacement
Make "upx -d" unpacking impossible!
#安全#Cronos Crypter is an simple example of crypter created for educational purposes.
ZwProcessHollowing is a x64 process hollowing project which uses direct systemcalls, dll unhooking and RC4 payload decryption
execute a PE in the address space of another PE aka process hollowing
Simple protector to show how to run a payload without dropping it using RunPE Technique
An implementation of the Process Hollowing technique.