hide-frida-agent icon indicating copy to clipboard operation
hide-frida-agent copied to clipboard

Published 20 hours ago • verified publisher icon nblog
→

Metadata

Hide Module "frida-agent.dll", Only for Windows.

hide-frida-agent

Hide Module "frida-agent.dll"

processing method

  1. unlink. (PEB.Ldr.InLoadOrderLinks 、PEB.Ldr.InMemoryOrderLinks、PEB.Ldr.InitializationOrderLinks)
  2. erase pe headers.
  3. shield to query the usage area of the module. (ntdll.NtQueryVirtualMemory)

← Metadata

24
Stars
3
Forks
Watchers

Owner

verified publisher icon nblog

Metadata

Hide Module "frida-agent.dll", Only for Windows.

Back