Template-Driven AV/EDR Evasion Framework

PE Injection、DLL Injection、Process Injection、Thread Injection、Code Injection、Shellcode Injection、ELF Injection、Dylib Injection, including 400+Tools and 350+posts

🐟 PoC of a VBA macro spawning a process with a spoofed parent and command line.

PE loader with various shellcode injection techniques

Some DLL Injection techniques in C++ implemented for both x86 and x64 windows OS processes

Materials for the workshop "Red Team Ops: Havoc 101"

This novel way of using NtQueueApcThreadEx by abusing the ApcRoutine and SystemArgument[0-3] parameters by passing a random pop r32; ret gadget can be used for stealthy code injection.

Incomplete project

A C# DLL injection library

An open-source process injection enumeration tool written in C#

Source code of exploiting windows API for red teaming series

Kernel Security driver used to block past, current and future process injection techniques on Windows Operating System.

A Dropper POC with a focus on aiding in EDR evasion, NTDLL Unhooking followed by loading ntdll in-memory, which is present as shellcode (using pe2shc by @hasherezade). Payload encryption via SystemFucntion033 NtApi and No new thread via Fiber

A dynamic unpacking tool

x64/x86 shellcode injector

Process Injection Techniques with Golang

Russia Wipers Dropper (educational-purposes )

Shellcode obfuscation tool to avoid AV/EDR.

C# Implementation of Jared Atkinson's Get-InjectedThread.ps1

0day Windows/x64 Inject All Processes With Meterpreter Reverse Shell Shellcode (655 bytes)