toneillcodes
|
3b3a2a7752
|
Removing oddly specific 'GetExplorerPid' function in favor of 'FindPidByName'.
|
2026-05-25 21:50:13 -04:00 |
|
toneillcodes
|
ec116702ed
|
Adding remote module stomping PoC
|
2026-05-25 16:52:57 -04:00 |
|
toneillcodes
|
3a414da4f2
|
Refactoring PEB parsing code to streamline processing for local and remote usage.
|
2026-05-24 17:04:43 -04:00 |
|
toneillcodes
|
77731d645e
|
Renaming PEB variable that Gemini did a horrendous job with. Refactoring argument parsing.
|
2026-05-22 07:32:46 -04:00 |
|
toneillcodes
|
125d8014ef
|
Adding module stomping resources and information
|
2026-05-21 23:00:32 -04:00 |
|
toneillcodes
|
d158d4201e
|
Merge branch 'main' of https://github.com/toneillcodes/windows-process-injection
|
2026-05-21 22:45:41 -04:00 |
|
toneillcodes
|
a53411978b
|
Parent process ID spoofing and header adjustments
|
2026-05-21 22:45:32 -04:00 |
|
toneillcodes
|
cd5c4772d8
|
Update find-stompable-dlls.py with full path output, and include/exclude list filtering
|
2026-05-21 19:37:57 -04:00 |
|
toneillcodes
|
face33a5cf
|
Update README.md with find-stompable-dlls script info
|
2026-05-18 22:09:28 -04:00 |
|
toneillcodes
|
6d1d26fbd5
|
Create find-stompable-dlls.py
|
2026-05-18 22:06:34 -04:00 |
|
toneillcodes
|
bc8566f98e
|
Addd tlhelp32 header to utils.h
|
2026-05-01 08:57:51 -04:00 |
|
toneillcodes
|
f5e38b1b39
|
Add GetExplorerPID to utils.h
|
2026-05-01 08:57:16 -04:00 |
|
toneillcodes
|
99efbd098f
|
Add GetExplorerPID to utils.cpp
|
2026-05-01 08:56:46 -04:00 |
|
toneillcodes
|
9fd17692a4
|
Update indirect-syscalls-ex.cpp
|
2026-04-30 22:15:47 -04:00 |
|
toneillcodes
|
388473e0d1
|
Create indirect-syscalls.asm
|
2026-04-30 21:45:33 -04:00 |
|
toneillcodes
|
b3c5923408
|
Create indirect-syscalls-ex.cpp
|
2026-04-30 21:45:08 -04:00 |
|
toneillcodes
|
e316669669
|
Initial commit of alphabet-peb-loader PoC
|
2026-04-07 18:19:22 -04:00 |
|
toneillcodes
|
9e073fc830
|
Fixing the manual ordinal resolution
|
2026-04-07 14:34:56 -04:00 |
|
toneillcodes
|
d717869c63
|
Adjusting function names to maintain obfuscation
|
2026-04-07 11:03:12 -04:00 |
|
toneillcodes
|
1ab7be871d
|
Fixing PEB includes and README links
|
2026-04-04 15:35:19 -04:00 |
|
toneillcodes
|
b8e9e0f5b3
|
Merge branch 'main' of https://github.com/toneillcodes/windows-process-injection
|
2026-04-04 12:04:04 -04:00 |
|
toneillcodes
|
7fd776ecfa
|
Updating PEB/EAT code, adding syscall examples and snippets
|
2026-04-04 12:03:40 -04:00 |
|
toneillcodes
|
01266bdb97
|
Create bintocsharp.py
|
2026-03-10 19:46:40 -04:00 |
|
toneillcodes
|
ef0fea33c9
|
PEB walking and EAT crawling
|
2026-01-22 22:11:08 -05:00 |
|
toneillcodes
|
486d9bcc89
|
Adding module stomping. Fixing VirtualAlloc call in example 2, adding stub folders for additional techniques.
|
2026-01-22 08:43:44 -05:00 |
|
toneillcodes
|
b88bef461a
|
Create getpid.cpp
|
2025-09-05 19:06:46 -04:00 |
|
toneillcodes
|
aea57a2099
|
Port bintoc from ruby to python
|
2025-09-01 21:04:24 -04:00 |
|
toneillcodes
|
e9c4a8d6e6
|
Create bintoc.rb
|
2025-09-01 19:20:16 -04:00 |
|
toneillcodes
|
81d13a98cf
|
Styling fix to FindPidByName function name
|
2025-08-25 17:54:32 -04:00 |
|
toneillcodes
|
0172ac99ec
|
Style update
|
2025-08-17 18:16:13 -04:00 |
|
toneillcodes
|
0125033d0b
|
Adding links to code references
|
2025-08-17 18:12:45 -04:00 |
|
toneillcodes
|
ac755de068
|
Update README.md
|
2025-08-17 18:11:46 -04:00 |
|
toneillcodes
|
408d3b32ae
|
Update injection-example-2.cpp
|
2025-08-17 18:08:58 -04:00 |
|
toneillcodes
|
1b38162c27
|
Update injection-example-1.cpp
|
2025-08-17 18:08:30 -04:00 |
|
toneillcodes
|
82d6123e7c
|
Rename injection-example-4.cpp to fundamentals/injection-example-4.cpp
|
2025-08-17 18:04:58 -04:00 |
|
toneillcodes
|
b0e70239c0
|
Rename injection-example-3.cpp to fundamentals/injection-example-3.cpp
|
2025-08-17 18:04:43 -04:00 |
|
toneillcodes
|
25da772dd6
|
Rename injection-example-2.cpp to fundamentals/injection-example-2.cpp
|
2025-08-17 18:04:23 -04:00 |
|
toneillcodes
|
7b6103501d
|
Rename injection-example-1.cpp to fundamentals/injection-example-1.cpp
|
2025-08-17 18:04:01 -04:00 |
|
toneillcodes
|
7217415c0b
|
Create injection-example-4.cpp
|
2025-08-17 17:42:22 -04:00 |
|
toneillcodes
|
89990fff53
|
Update injection-example-3.cpp
|
2025-08-17 16:18:19 -04:00 |
|
toneillcodes
|
9cb183ad6b
|
Update injection-example-2.cpp
|
2025-08-17 15:06:32 -04:00 |
|
toneillcodes
|
de73931a11
|
Update injection-example-1.cpp
|
2025-08-17 14:24:59 -04:00 |
|
toneillcodes
|
549325d583
|
Update injection-example-2.cpp
|
2025-08-17 14:21:39 -04:00 |
|
toneillcodes
|
706d550ec7
|
Update injection-example-1.cpp
|
2025-08-17 14:21:10 -04:00 |
|
toneillcodes
|
51031c1830
|
Update injection-example-3.cpp
|
2025-08-17 09:56:52 -04:00 |
|
toneillcodes
|
d367453823
|
Update injection-example-2.cpp
|
2025-08-17 09:56:37 -04:00 |
|
toneillcodes
|
19280207d8
|
Update injection-example-1.cpp
|
2025-08-17 09:56:27 -04:00 |
|
toneillcodes
|
0a0044871c
|
Condensing comment to one line
|
2025-08-16 08:10:30 -04:00 |
|
toneillcodes
|
69a5a9877b
|
Update README.md
|
2025-08-16 07:22:19 -04:00 |
|
toneillcodes
|
bc307a860c
|
Create injection-example-3.cpp
|
2025-08-15 22:07:21 -04:00 |
|