Maldev-Academy/WhisperHijack

Proof of Concept for Process Code Injection Without Using WriteProcessMemory

Utilizing TLS callbacks to execute a payload without spawning any threads in a remote process

Demonstration of the DLL party process injection technique

A collection of techniques for process injection on Windows

Abusing Windows fork API and OneDrive.exe process to inject the malicious shellcode without allocating new RWX memory region.

A set of fully-undetectable process injection techniques abusing Windows Thread Pools

P³-Shellcode Loader is a loader that implements a code injection technique which leverages the Process Parameters structure as an execution and staging location for shellcode injection into remote processes, without triggering common detection mechanisms.

PoC demonstrating a multi process injection chain aimed at remotely executing shellcode

Indirect Dynamic Syscall, SSN + Syscall address sorting via Modified TartarusGate approach + Remote Process Injection via APC Early Bird + Spawns a sacrificial Process as target process + (ACG+BlockDll) mitigation policy on spawned process + PPID spoofing + Api resolving from TIB + API hashing