Process Ghosting - a PE injection technique, similar to Process Doppelgänging, but using a delete-pending file instead of a transacted file
-
Updated
Mar 11, 2024 - C
Process Ghosting - a PE injection technique, similar to Process Doppelgänging, but using a delete-pending file instead of a transacted file
My implementation of enSilo's Process Doppelganging (PE injection technique)
Transacted Hollowing - a PE injection technique, hybrid between ProcessHollowing and ProcessDoppelgänging
ChimeraPE (a PE injector type - alternative to: RunPE, ReflectiveLoader, etc) - a template for manual loading of EXE, loading imports payload-side
Herpaderply Hollowing - a PE injection technique, hybrid between Process Hollowing and Process Herpaderping
A process injection technique using only thread context manipulation
Add a description, image, and links to the pe-injector topic page so that developers can more easily learn about it.
To associate your repository with the pe-injector topic, visit your repo's landing page and select "manage topics."