Moneta is a live usermode memory analysis tool for Windows with the capability to detect malware IOCs

Pseudo-malicious usermode memory artifact generator kit designed to easily mimic the footprints left by real malware on an infected Windows OS.

Process Hollowing in C++ (x86 / x64) - Process PE image replacement

Hide malware behind a legit process C#

Learning Process Injection and Hollowing techniques

A launcher to load a DLL with xored cobalt strike shellcode executed in memory through process hollowing technique

(Sim)ulate (Ba)zar Loader

Process Hollowing POC in CPP

Process Hollowing Detection on a live system

Explanation and Proof of Concept of the Process Hollowing (Windows) technique, commonly used by malware and game hackers to bypass security systems

Scripts permettant de contourner la protection antivirale de Windows Defender via la technique de Process Hollowing avec une injection de shellcode préalablement obfusqué avec un fonction XOR.

process hollowing poc

The RunPE program is written in C# to execute a specific executable file within another files memory using the ProcessHollowing technique.

Hollow out 3D meshes.

Implementation of process hollowing on x32 .

Example Of Some Simple Process Hollowing

Visual hollowing aid for woodturners