TwoSevenOneT/InjectSetConsole

P³-Shellcode Loader is a loader that implements a code injection technique which leverages the Process Parameters structure as an execution and staging location for shellcode injection into remote processes, without triggering common detection mechanisms.

Abusing Windows fork API and OneDrive.exe process to inject the malicious shellcode without allocating new RWX memory region.

PoC demonstrating a multi process injection chain aimed at remotely executing shellcode

Utilizing TLS callbacks to execute a payload without spawning any threads in a remote process

Activation Context Hijacking Evasion Tool

A collection of techniques for process injection on Windows

A set of fully-undetectable process injection techniques abusing Windows Thread Pools

Indirect Dynamic Syscall, SSN + Syscall address sorting via Modified TartarusGate approach + Remote Process Injection via APC Early Bird + Spawns a sacrificial Process as target process + (ACG+BlockDll) mitigation policy on spawned process + PPID spoofing + Api resolving from TIB + API hashing

ELF anti-forensics exec, for injecting full dynamic executables into process image (With thread injection)