Process Injection Variants Pack
$249.99
Process injection variants with REAL Windows primitives (ctypes, no deps): classic, NtQueueApcThread queueing, thread hijack with CONTEXT rewrite, early bird, module stomping with real base resolution, and Process Doppelgänging (TxF + NtCreateSection SEC_IMAGE + NtCreateProcessEx).
Key Features
- • 6 techniques — every one executes real APIs; no simulated successes
- • Process Doppelgänging: payload never touches disk outside the transaction
- • module stomping resolves the real base via EnumProcessModulesEx
- • Non-Windows hosts report honest failures
Requirements
- Windows; Python 3 (ctypes, stdlib only).
Changelog
- v3.0 — all techniques real (previously 4/6 returned success without executing); Doppelgänging implemented.
Package Contents
Exact contents of the download archive (2 files):
| README.md | 1,847 B |
| process_injector.py | 30,132 B |
Related Tools
Evasion & Stealth
AMSI Bypass Payload Generator
Evasion & Stealth
PowerShell Obfuscation Engine
Evasion & Stealth
EDR Unhooking Library
Evasion & Stealth