This commit is contained in:
Hue-Jhan
2026-04-06 11:00:53 +02:00
parent c30d56a869
commit 8753d70b48
+7 -5
View File
@@ -1,14 +1,16 @@
# Apc Process & DLL injection
Collection of remote Shellcode Loaders using Apc injection, DLL injection (using apc to call LoadLibrary) and a custom Early Bird injection. The code is pretty simple and uses high level libraries (easy to flag) and encrypted shellcode.
Collection of remote Shellcode Loaders using Asyncronous Procedure Calls. The code is pretty simple and uses high level libraries (easy to flag) and encrypted shellcode. This code is for educational purposes only, do not use it for any malicious or unauthorized activity.
# 💻 Code
The 3 projects have the same basic structure and share most of the code, they decode the encrypted shellcode (its for a windows msg box), and proceed with the injection.
This repo consists of 3 projects that have the same basic structure and share most of the code, they are: APC Process injection, DLL version (targeting its own process), and a DLL Injector (LoadLibrary using APC), the shellcode is for a windows msg box.
### 1) Classic APC Injection
### 1) APC Process Injection
### 2) DLL Apc Injection
First the shellcode is decrypted, for a better view of the encryption mechanism check it out [here](https://github.com/Hue-Jhan/Simple-shellcode-crypter), then the code
### 3) (Custom) Early Bird Injection
### 2) DLL Version
### 3) DLL Injection
# 🛡️ AV Detection