issues
search
hasherezade
/
process_ghosting
Process Ghosting - a PE injection technique, similar to Process Doppelgänging, but using a delete-pending file instead of a transacted file
MIT License
631
stars
113
forks
source link
issues
Newest
Newest
Most commented
Recently updated
Oldest
Least commented
Least recently updated
Change Process
#13
Frocz
opened
2 years ago
0
.tmp created
#12
Jaimebuu
opened
2 years ago
3
Added MIT license (Issue #10)
#11
hasherezade
closed
2 years ago
0
License?
#10
snowkoan
closed
2 years ago
2
Crashes my Windows 10 VM
#9
harshitrajpal
closed
2 years ago
1
Blocked by wdfilter?
#8
Mukad3
opened
3 years ago
1
The issue of VirtualAllocEx usage
#7
EddieIvan01
closed
3 years ago
9
Reflective Loader as payload
#6
Atsika
opened
3 years ago
5
In memory file
#5
Atsika
closed
3 years ago
5
32 Bit Payloads on 64 Bit Systems.
#4
Providence47
opened
3 years ago
5
The PoC produces random result due to the ghosted file being created asynchronous
#3
ladislav-zezula
closed
3 years ago
1
Payload doens't fire
#2
hawaii67
opened
3 years ago
11
build error
#1
ghost
opened
3 years ago
5