jackullrich/TRunPE
A modified RunPE (process hollowing) technique avoiding the usage of SetThreadContext by appending a TLS section which calls the original entrypoint.
CGPL-3.0
Stargazers
- 3rkutPRODAFT
- Aekras1a127.0.0.1/Australia
- akpotter
- AlirezaCheginiIR
- decay88
- EspressoCake
- HadesW
- Hello-xBugs
- idafchev
- int3hhCRYPTOCUBE
- kevinajordanActimateAI LLC
- lengjiboUS
- lesnuages
- lifa123china
- loossy
- luxcupitor
- LwSe
- MatthMoestl
- neriberto::1/128
- obi0ne
- OGDeguy
- Orange150
- Pernat1yUkraine
- sh4hin
- shoriweNetgate
- SkyBulk
- SolomonSklash
- stuxnet147147
- sunnyneo
- T31M
- theguly
- WBGlIl
- whereisr0da
- xrkkBLCU
- yax571
- ZanderChang