Moneta is a live usermode memory analysis tool for Windows with the capability to detect malware IOCs

Pseudo-malicious usermode memory artifact generator kit designed to easily mimic the footprints left by real malware on an infected Windows OS.

Process Hollowing in C++ (x86 / x64) - Process PE image replacement

Hide malware behind a legit process C#

Learning Process Injection and Hollowing techniques

(Sim)ulate (Ba)zar Loader

A launcher to load a DLL with xored cobalt strike shellcode executed in memory through process hollowing technique

Process Hollowing POC in CPP

Process Hollowing Detection on a live system

Scripts permettant de contourner la protection antivirale de Windows Defender via la technique de Process Hollowing avec une injection de shellcode préalablement obfusqué avec un fonction XOR.

Implementation of process hollowing on x32 .

Hollow out 3D meshes.

The RunPE program is written in C# to execute a specific executable file within another files memory using the ProcessHollowing technique.

Example Of Some Simple Process Hollowing

Visual hollowing aid for woodturners