pe-injector

Process Ghosting - a PE injection technique, similar to Process Doppelgänging, but using a delete-pending file instead of a transacted file

My implementation of enSilo's Process Doppelganging (PE injection technique)

Transacted Hollowing - a PE injection technique, hybrid between ProcessHollowing and ProcessDoppelgänging

PE loader with various shellcode injection techniques

A more stealthy variant of "DLL hollowing"

ChimeraPE (a PE injector type - alternative to: RunPE, ReflectiveLoader, etc) - a template for manual loading of EXE, loading imports payload-side

PE Binary Shellcode Injector - Automated code cave discovery, shellcode injection, ASLR bypass, x86/x64 compatible

Herpaderply Hollowing - a PE injection technique, hybrid between Process Hollowing and Process Herpaderping

Inject a Dll from memory

A process injection technique using only thread context manipulation

ProcessGhosting 技术的 rust 实现版本

MS Word , PPT Macros VBA payload Dropper tool ⏳

Advanced Windows PE Injector (x86/x64, C++17, MSVC 19+). Manual mapping of DLLs (Run export call) + full EXE injection into svchost.exe. Direct syscall stubs, PPID spoofing (explorer.exe), randomized base, PE headers/IAT/TLS/relocs handling, trampoline execution.

Hands-on PE format internals lab — headers, sections, data directories, TLS, AoEP, packer detection & UPX unpacking, payload injection (.text/.rsrc/.data/XOR/Base64), and packed malware analysis using pestudio, pe-bear, malcat, x64dbg & more.

The RunPE program is written in C# to execute a specific executable file within another files memory using the ProcessHollowing technique.

This python tool injects shellcode in Windows Program Executable to backdoor it with optional polymorphism.

Emulate HID devices and exploit proximity targets directly through the Android kernel using ConfigFS, removing the need for external hardware.

Design and implement NullSection, a research-grade Windows execution framework that creates and runs executable images without a persistent disk-backed file, leveraging native NT APIs and image section manipulation.