HOLLOW
by boku7
EarlyBird process hollowing technique (BOF) - Spawns a process in a suspended state, inject shellcode, hijack main thread with APC, and execute shellcode
AI summary
Shellcode injector
A tool that enables remote process shellcode execution using the Early Bird injection technique
- stars
- 267
- forks
- 57
- watching
- 10
Similar projects
Found by comparing what the projects do, not just their names.
Process spawner
A Cobalt Strike Beacon tool that spawns a sacrificial process to execute shellcode, using techniques like Arbitrary Code Guard and PPID spoofing to evade detection.
Memory injector
A tool for injecting malware into processes by mapping it to memory without registering it with the kernel.
AMSIBypass Tool
A tool that bypasses AMSI in a remote process with code injection.
Process injector
A tool that enables process injection without thread creation by hooking an export function from a remote process.
Environment extractor
A tool that extracts environment variables from a process without touching system DLLs using hand-crafted shellcode
PE injector
An implementation of a memory-based PE injection technique for executing payloads in a target process
ETW bypass tool
Tool to bypass ETW (Event Tracing for Windows) security measure in remote processes by injecting a custom syscall
System info BOF
A Cobalt Strike Beacon Object File (BOF) that uses custom syscaller code to make direct system calls to retrieve process information on the target system.
Shellcode injection library
A collection of C# techniques for injecting malicious shellcode into processes
Process injector
An assembler-based tool to inject shellcode into running processes on Linux using ptrace(), allowing for controlled modification of process behavior.
Process injector
A tool for injecting malicious code into processes using native APIs and memory section mapping.
Process enumerator
An exploit tool that uses direct system calls to enumerate processes based on specific loaded modules or process handles
In-memory exploit kit
A lightweight implant tool allowing users to create and execute custom in-memory operations on Windows
Clipboard injection tool
A tool that injects malicious code into the clipboard window of a remote process to execute custom shellcode
API generator
Creates C programs with custom API calls using Microsoft's documentation endpoint and grep results from mingw header files
