mirror of
https://github.com/pe3zx/my-infosec-awesome.git
synced 2024-10-01 03:35:35 +00:00
Add: hasherezade/process_chameleon to Defense Evasion section
This commit is contained in:
parent
e6d0a0b7d9
commit
aaabdfe2fa
@ -1354,6 +1354,10 @@ Some tools can be categorized in more than one category. But because the current
|
|||||||
<td><a href="https://github.com/hasherezade/module_overloading">hasherezade/module_overloading</a></td>
|
<td><a href="https://github.com/hasherezade/module_overloading">hasherezade/module_overloading</a></td>
|
||||||
<td>A more stealthy variant of "DLL hollowing"</td>
|
<td>A more stealthy variant of "DLL hollowing"</td>
|
||||||
</tr>
|
</tr>
|
||||||
|
<tr>
|
||||||
|
<td><a href="https://github.com/hasherezade/process_chameleon">hasherezade/process_chameleon</a></td>
|
||||||
|
<td>A process overwriting its own PEB to make an illusion that it has been loaded from a different path.</td>
|
||||||
|
</tr>
|
||||||
<tr>
|
<tr>
|
||||||
<td><a href="https://github.com/hasherezade/transacted_hollowing">hasherezade/transacted_hollowing</a></td>
|
<td><a href="https://github.com/hasherezade/transacted_hollowing">hasherezade/transacted_hollowing</a></td>
|
||||||
<td>Transacted Hollowing - a PE injection technique, hybrid between ProcessHollowing and ProcessDoppelgänging</td>
|
<td>Transacted Hollowing - a PE injection technique, hybrid between ProcessHollowing and ProcessDoppelgänging</td>
|
||||||
|
Loading…
Reference in New Issue
Block a user