/TRunPE

A modified RunPE (process hollowing) technique avoiding the usage of SetThreadContext by appending a TLS section which calls the original entrypoint.

Primary LanguageCGNU General Public License v3.0GPL-3.0

Watchers