mirror of
https://github.com/Hue-Jhan/Apc-Process-Injection-and-DLL-injection
synced 2026-06-21 13:43:14 +00:00
aaa
This commit is contained in:
@@ -1,14 +1,16 @@
|
||||
# Apc Process & DLL injection
|
||||
Collection of remote Shellcode Loaders using Apc injection, DLL injection (using apc to call LoadLibrary) and a custom Early Bird injection. The code is pretty simple and uses high level libraries (easy to flag) and encrypted shellcode.
|
||||
Collection of remote Shellcode Loaders using Asyncronous Procedure Calls. The code is pretty simple and uses high level libraries (easy to flag) and encrypted shellcode. This code is for educational purposes only, do not use it for any malicious or unauthorized activity.
|
||||
|
||||
# 💻 Code
|
||||
The 3 projects have the same basic structure and share most of the code, they decode the encrypted shellcode (its for a windows msg box), and proceed with the injection.
|
||||
This repo consists of 3 projects that have the same basic structure and share most of the code, they are: APC Process injection, DLL version (targeting its own process), and a DLL Injector (LoadLibrary using APC), the shellcode is for a windows msg box.
|
||||
|
||||
### 1) Classic APC Injection
|
||||
### 1) APC Process Injection
|
||||
|
||||
### 2) DLL Apc Injection
|
||||
First the shellcode is decrypted, for a better view of the encryption mechanism check it out [here](https://github.com/Hue-Jhan/Simple-shellcode-crypter), then the code
|
||||
|
||||
### 3) (Custom) Early Bird Injection
|
||||
### 2) DLL Version
|
||||
|
||||
### 3) DLL Injection
|
||||
|
||||
|
||||
# 🛡️ AV Detection
|
||||
|
||||
Reference in New Issue
Block a user