Search results

Improve payload obfuscation with runtime encryption.

Status: Open.

#10 In Esgr0bar/PE_Injector;

· Esgr0bar opened on May 4, 2026

Inject into existing code caves instead of adding sections.

Status: Open.

#9 In Esgr0bar/PE_Injector;

· Esgr0bar opened on May 4, 2026

Add direct syscall option to reduce API hooking visibility.

Status: Open.

#8 In Esgr0bar/PE_Injector;

· Esgr0bar opened on May 4, 2026

Add APC injection as a new technique.

Status: Open.

#7 In Esgr0bar/PE_Injector;

· Esgr0bar opened on May 4, 2026

New section header write assumes there is enough header slack.

Status: Open.

#6 In Esgr0bar/PE_Injector;

· Esgr0bar opened on May 4, 2026

Static infection overwrites the entry point without returning to original code.

Status: Open.

#5 In Esgr0bar/PE_Injector;

· Esgr0bar opened on May 4, 2026

Process enumeration skips entries because Process32First is not called.

Status: Open.

#4 In Esgr0bar/PE_Injector;

· Esgr0bar opened on May 4, 2026