Illustration drawn by RepoMasters from the repo’s ID and its language color. Credits

AlphaUncommon

med0x2e/ExecuteAssembly

Load/Inject .NET assemblies by; reusing the host (spawnto) process loaded CLR AppDomainManager, Stomping Loader/.NET assembly PE DOS headers, Unlinking .NET related modules, bypassing ETW+AMSI, avoiding EDR hooks via NT static syscalls (x64) and hiding imports by dynamically resolving APIs (hash).

Owner: med0x2e (personal account)
Stars: Stars: 598
Forks: Forks: 112
Language: C++
License: None
Created: 2020
Tier: Alpha (250 to 699 ★) What this tier means

View on GitHub

More repos by med0x2e

All 7 repos by med0x2e

med0x2e/SigFlipStars: 1,299C#Beta
med0x2e/GadgetToJScriptStars: 1,140C#Beta
med0x2e/NTLMRelay2SelfStars: 421CAlpha
med0x2e/NoAmciStars: 216C#Prototype
med0x2e/vba2clrStars: 147VBAPrototype
med0x2e/NET-Assembly-Inject-RemoteStars: 133C#Prototype

Nearby in C++

All C++ repos

VASTDynamics/Vaporizer2Stars: 598C++Alpha
RGAA-Software/GoDeskStars: 598C++Alpha
Zarosmm/obs-bilibili-streamStars: 598C++Alpha
adafruit/Adafruit_MQTT_LibraryStars: 598C++Alpha
clementgallet/libTASStars: 598C++Alpha
Liber-coder/CV_NotesStars: 598C++Alpha