Skip to content

Latest commit

 

History

History
20 lines (13 loc) · 1.23 KB

README.md

File metadata and controls

20 lines (13 loc) · 1.23 KB

Modified Process Hollowing (MPH)

Overview

Modified Process Hollowing (MPH) is an enhanced version of Process Hollowing, which is one of the process injection techniques. It offers additional features and improvements over the traditional method.

Features

  • Enhanced Process Creation: MPH enables the creation of processes and reading data using COM objects, expanding the capabilities of the injection technique.
  • Dynamic API Resolution: The injection process dynamically resolves APIs, providing adaptability and compatibility across various Windows 10 operating system architectures.
  • Function Hooking: All functions of Process Hollowing are hooked based on the Windows 10 operating system architecture, allowing for better control and customization.

Usage

  1. Clone the Project: Clone the MPH repository: https://github.com/CaptanMoss/Modified-Process-Hollowing.git
  2. Build the Project: Open the project with Visual Studio and build it.
  3. Run the Executable: Execute the compiled binary to initiate the modified process hollowing technique.

Contributing

🤝 Contributions are welcome! If you'd like to contribute to this project, please open a pull request or create an issue to discuss your suggestions.