• Stars
    star
    191
  • Rank 201,939 (Top 4 %)
  • Language
    C#
  • Created over 3 years ago
  • Updated over 3 years ago

Reviews

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Repository Details

Inject your x64 bit executable to any process, masking it as a legitimate process for Anti-Virus evasion.

PEx64-Injector (Process Migrator)

Migrate any x64 exe to any x64 process (Net FrameWork 3.5)

No Administrator privileges required.

GIF Demo

PoC

How can be used?

shot

Download here.

Usage: Migrator.exe payload(fpath) Migratefile(fpath)

Example: Migrator.exe C:\Users\User\Desktop\Putty64.exe C:\Windows\System32\notepad.exe

Keep as a note that when you specify the migratefile it will launch as a new process and won't migrate to an already running process.

Such tool can be utilized for AV evasion, masking malicious software under legitimate process.

Code

Todo: download/execute function to load remote files.
Special thanks to GigaJew.