Run a Exe File (PE Module) in memory (like an Application Loader)

A VBA implementation of the RunPE technique or how to bypass application whitelisting.

Demos of various injection techniques found in malware

pure-python implementation of MemoryModule technique to load dll and unmanaged exe entirely from memory

ChimeraPE (a PE injector type - alternative to: RunPE, ReflectiveLoader, etc) - a template for manual loading of EXE, loading imports payload-side

Tool to evade Antivirus With Different Techniques

Process Hollowing in C++ (x86 / x64) - Process PE image replacement

Make "upx -d" unpacking impossible!

Hide malware behind a legit process C#

Cronos Crypter is an simple example of crypter created for educational purposes.

ZwProcessHollowing is a x64 process hollowing project which uses direct systemcalls, dll unhooking and RC4 payload decryption

execute a PE in the address space of another PE aka process hollowing

Nim process hollowing loader

Simple protector to show how to run a payload without dropping it using RunPE Technique

RunPE using Hell's Gate technique.

Golang version of https://github.com/hasherezade/libpeconv

Lime Crypter Obfuscator Mod

Software Protector

Loader and RunPE file executer

An implementation of the Process Hollowing technique.