在Windows环境下的进程注入方法:远程线程注入、创建进程挂起注入、反射注入、APCInject、SetWindowHookEX注入
-
Updated
Sep 22, 2018 - C
在Windows环境下的进程注入方法:远程线程注入、创建进程挂起注入、反射注入、APCInject、SetWindowHookEX注入
An Open source Pentesting Software for Mapping Injection points to Takeover.
A collection of PoCs for different injection techniques on Windows!
Encrypts 64-bit elf files that decrypt at runtime.
🔱 Ronin the Shogun, WebApp parameter analysis and fuzzer for XSS and SSRF.
Binary Injection Elf & Macho
A deep dive into asynchronous code injection using APC techniques. Includes code samples, step-by-step explanations, and real-world POCs.
A way to bypass defender and get your shellcode in memory before its caged in AV hell.
NT API Code Injection using NtCreateSection and NtMapViewOfSection to inject shellcode into a remote process. This method allows for efficient memory manipulation and code execution within target processes.
This repository contains a practical cheat sheet demonstrating various callback-based techniques to execute shellcode on Windows, with detection insights and code samples.
A concise cheatsheet covering key process code injection techniques for red teaming and malware development.
🧪 Explore malware samples to understand how Trojans, spyware, ransomware, and more operate in a controlled environment for research and learning.
EarlyBird APC Injection is a stealthy process injection technique that queues malicious shellcode into a suspended thread of a newly created process. Once the thread is resumed, the payload executes, making detection and analysis more difficult.
A simple implementation of process code injection. This demonstrates injecting shellcode into a remote process, using basic Windows API functions for process manipulation.
Add a description, image, and links to the injection-attacks topic page so that developers can more easily learn about it.
To associate your repository with the injection-attacks topic, visit your repo's landing page and select "manage topics."