• Stars
    star
    119
  • Rank 297,930 (Top 6 %)
  • Language
    C#
  • Created over 4 years ago
  • Updated over 1 year ago

Reviews

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Repository Details

GhostLoader - AppDomainManager - Injection - 攻壳机动队

A fork from subTee, who seems to have removed the original short-lived public repo. Not my work. If you're reading this subTee and want me to take it down, I will. Didn't mean to host some private code of yours.

GhostLoader

GhostLoader - AppDomainManager - Injection - 攻壳机动队

GhostLoader Steps :)

1. Create C:\Tools
2. Copy Some .NET, any .NET binary to C:\Tools
3. In this example, we use FileHistory.exe, but any .NET app will do.
4. Ensure FileHistory.exe.config is in the same path
5. Execute C:\Tools\FileHistory.exe

Does your tool/product detect/observe the Image Load Event?

The purpose of this example is to demonstrate a way to circumvent, tools that catch/prevent ImageLoad events.