process-injection topic

A Dropper POC with a focus on aiding in EDR evasion, NTDLL Unhooking followed by loading ntdll in-memory, which is present as shellcode (using pe2shc by @hasherezade). Payload encryption via SystemFuc...

reveng007

Materials for the workshop "Red Team Ops: Havoc 101"

WesleyWong420

This novel way of using NtQueueApcThreadEx by abusing the ApcRoutine and SystemArgument[0-3] parameters by passing a random pop r32; ret gadget can be used for stealthy code injection.

LloydLabs

An open-source process injection enumeration tool written in C#

gh0x0st

Centralized resource for listing and organizing known injection techniques and POCs

itaymigdal

Shellcode obfuscation tool to avoid AV/EDR.

Konis-Bros

C# Implementation of Jared Atkinson's Get-InjectedThread.ps1

Apr4h

Process Injection via Component Object Model (COM) IRundown::DoCallback().

0xlane

ProcessGhosting 技术的 rust 实现版本

0xlane

Learning Various Process Injection Techniques

Dos98