xCmac/Dreadnought

PoC for detecting and dumping code injection (built and extended on UnRunPE)

Dreadnought

PoC for detecting and dumping code injection (built and extended on UnRunPE)

Apologies for the super terrible code!

Related paper:

https://github.com/NtRaiseHardError/NtRaiseHardError.github.io/blob/master/_posts/2018-02-20-Userland-API-Monitoring-and-Code-Injection-Detection.md