A demo that loads and runs a code using detached NTDLL (in order to evade userland hooks monitoring activity).
WARNING: Experimental version.
- uses library:
https://github.com/hasherezade/libpeconv.git
-
Notifications
You must be signed in to change notification settings - Fork 13
hasherezade/loaderine
Folders and files
| Name | Name | Last commit message | Last commit date | |
|---|---|---|---|---|
Repository files navigation
About
A demo implementation of a well-known technique used by some malware to evade userland hooking, using my library: libpeconv.
Topics
Resources
Stars
Watchers
Forks
Releases
No releases published
Packages 0
No packages published