Skip to content

CaptanMoss/Modified-Process-Hollowing

Repository files navigation

Modified Process Hollowing (MPH)

Overview

Modified Process Hollowing (MPH) is an enhanced version of Process Hollowing, which is one of the process injection techniques. It offers additional features and improvements over the traditional method.

Features

  • Enhanced Process Creation: MPH enables the creation of processes and reading data using COM objects, expanding the capabilities of the injection technique.
  • Dynamic API Resolution: The injection process dynamically resolves APIs, providing adaptability and compatibility across various Windows 10 operating system architectures.
  • Function Hooking: All functions of Process Hollowing are hooked based on the Windows 10 operating system architecture, allowing for better control and customization.

Usage

  1. Clone the Project: Clone the MPH repository: https://github.com/CaptanMoss/Modified-Process-Hollowing.git
  2. Build the Project: Open the project with Visual Studio and build it.
  3. Run the Executable: Execute the compiled binary to initiate the modified process hollowing technique.

Contributing

🤝 Contributions are welcome! If you'd like to contribute to this project, please open a pull request or create an issue to discuss your suggestions.

About

Modified Process Hollowing (MPH)

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published