ProcessusT/UnhookingDLL

This script is used to bypass DLL Hooking using a fresh mapped copy of ntdll file, patch the ETW and trigger a shellcode with process hollowing

语言：C++ · GitHub 星标：74 · Fork：12

话题：bypass · dll-unhooking · edr · etw · process-hollowing · shellcode

在 GitHub 上查看原仓库