The RunPE program is written in C# to execute a specific executable file within another files memory using the ProcessHollowing technique.
-
Updated
Aug 27, 2024 - C#
The RunPE program is written in C# to execute a specific executable file within another files memory using the ProcessHollowing technique.
Implementation of the Process Hollowing technique for process injection (This is the third of three methods in the series)
Implementation of the Process Hollowing technique for process injection (This is the second of three methods in the series)
Implementation of the Process Hollowing technique for process injection (This is the first of three methods in the series)
Nim process hollowing loader
Builder for executable file that injects into legitimate processes
Lime Crypter Obfuscator Mod
pure-python implementation of MemoryModule technique to load dll and unmanaged exe entirely from memory
Make "upx -d" unpacking impossible!
Tool to evade Antivirus With Different Techniques
ZwProcessHollowing is a x64 process hollowing project which uses direct systemcalls, dll unhooking and RC4 payload decryption
ChimeraPE (a PE injector type - alternative to: RunPE, ReflectiveLoader, etc) - a template for manual loading of EXE, loading imports payload-side
Carbon Crypter / Packer
Delphi Process Hollowing, Updated.
Cronos Crypter is an simple example of crypter created for educational purposes.
Implementation of process hollowing on x32 .
Demos of various injection techniques found in malware
execute a PE in the address space of another PE aka process hollowing
Add a description, image, and links to the runpe topic page so that developers can more easily learn about it.
To associate your repository with the runpe topic, visit your repo's landing page and select "manage topics."