傀儡进程技术，禁止用于非法渗透由此产生一切后果与作者无关!!!
实现逻辑为创建一个挂起进程，替换其内容写入待加载的pe文件，更改线程环境块，EIP指向新程序的入口点，可以实现进程隐藏技术。
测试效果 项目Test1为测试程序，实战中替换即可
-
Notifications
You must be signed in to change notification settings - Fork 0
Avienma/Processholling
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Folders and files
| Name | Name | Last commit message | Last commit date | |
|---|---|---|---|---|
Repository files navigation
About
一个傀儡进程技术
Topics
Resources
Stars
Watchers
Forks
Releases
No releases published
Packages 0
No packages published