Pinned Loading

1. EDR-GhostLocker EDR-GhostLocker Public

   AppLocker-Based EDR Neutralization

   C 350 48

2. Orange-Cyberdefense/p3-loader Orange-Cyberdefense/p3-loader Public

   P³-Shellcode Loader is a loader that implements a code injection technique which leverages the Process Parameters structure as an execution and staging location for shellcode injection into remote …

   C 247 33

3. Fairy-Law Fairy-Law Public

   Fairy Law - Compromise or disable EDR security solutions

   C++ 80 13

4. COMouflage COMouflage Public

   COM-based DLL Surrogate Injection

   C++ 200 24

5. Early-Cryo-Bird-Injections Early-Cryo-Bird-Injections Public

   Early Bird Cryo Injections – APC-based DLL & Shellcode Injection via Pre-Frozen Job Objects

   C++ 149 19

6. FrostLock-Injection FrostLock-Injection Public

   FrostLock Injection is a freeze/thaw-based code injection technique that uses Windows Job Objects to temporarily freeze (suspend) a target process, inject shellcode, and then seamlessly resume (tha…

   C++ 49 8