pe-injection topic

PE Injection、DLL Injection、Process Injection、Thread Injection、Code Injection、Shellcode Injection、ELF Injection、Dylib Injection, including 400+Tools and 350+posts

alphaSeclab

Process Ghosting - a PE injection technique, similar to Process Doppelgänging, but using a delete-pending file instead of a transacted file

hasherezade

ProcessGhosting 技术的 rust 实现版本

0xlane

PE File Code Cave Helper (Backdooring and/or Basic Section Obfuscation)

DarkCoderSc

Small "Pin To TaskBar" exe for Command Line, tested on Windows 10 Version 20H2 (Win10 19042.964). Reverse engineering of syspin.exe "PE injection into Progman" method.

0x546F6D