GitHub repos

Dewera/Lunar
A lightweight native DLL mapping library that supports mapping directly from memory
Language: C#
#dll_injection #pe_loader #reverse_engineering
Stars: 68 Issues: 0 Forks: 8
https://github.com/Dewera/Lunar

1.59K views04:55

hasherezade/transacted_hollowing
Transacted Hollowing - a PE injection technique, hybrid between ProcessHollowing and ProcessDoppelgänging
Language: C
#pefile #malware #code_injection #pe_injector
Stars: 142 Issues: 0 Forks: 16
https://github.com/hasherezade/transacted_hollowing

2.23K views15:51

hasherezade/process_ghosting
Process Ghosting - a PE injection technique, similar to Process Doppelgänging, but using a delete-pending file instead of a transacted file
Language: C
#pefile #pe_injector #pe_injection
Stars: 120 Issues: 3 Forks: 24
https://github.com/hasherezade/process_ghosting

2.14K views15:51

hasherezade/pe-bear
Portable Executable reversing tool with a friendly GUI
Language: C++
#pe_analyzer #pe_analyzer_gui #pe_editor #pe_file #pe_format
Stars: 617 Issues: 1 Forks: 41
https://github.com/hasherezade/pe-bear

👍6

2.54K views10:22

ORCx41/AtomPePacker
A Highly capable Pe Packer
Language: C
#edr_bypass #packer #pe
Stars: 222 Issues: 1 Forks: 39
https://github.com/ORCx41/AtomPePacker

👍2🔥2

2.11K views10:23

fortra/No-Consolation
A BOF that runs unmanaged PEs inline
Language: C
#bof #cna #cobalt_strike #pe_loader
Stars: 214 Issues: 0 Forks: 24
https://github.com/fortra/No-Consolation

2.42K views05:21

👍1

2.15K views04:00