transacted_hollowing
Transacted Hollowing - a PE injection technique, hybrid between ProcessHollowing and ProcessDoppelgänging (by hasherezade)
process_ghosting
Process Ghosting - a PE injection technique, similar to Process Doppelgänging, but using a delete-pending file instead of a transacted file (by hasherezade)
| transacted_hollowing | process_ghosting | |
|---|---|---|
| 2 | 1 | |
| 496 | 602 | |
| - | - | |
| 3.5 | 4.3 | |
| 2 months ago | 2 months ago | |
| C | C | |
| MIT License | MIT License |
The number of mentions indicates the total number of mentions that we've tracked plus the number of user suggested alternatives.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
transacted_hollowing
Posts with mentions or reviews of transacted_hollowing.
We have used some of these posts to build our list of alternatives
and similar projects.
process_ghosting
Posts with mentions or reviews of process_ghosting.
We have used some of these posts to build our list of alternatives
and similar projects.
What are some alternatives?
When comparing transacted_hollowing and process_ghosting you can also consider the following projects:
VXUG-Papers - Research code & papers from members of vx-underground.
unipacker - Automatic and platform-independent unpacker for Windows binaries based on emulation
Reverse-Engineering-Tutorial - A FREE comprehensive reverse engineering tutorial covering x86, x64, 32-bit ARM & 64-bit ARM architectures.
pttb_-_Pin_To_TaskBar - Small "Pin To TaskBar" exe for Command Line, tested on Windows 10 Version 20H2 (Win10 19042.964). Reverse engineering of syspin.exe "PE injection into Progman" method.
Vaccine - :syringe: Vaccine - Make your apps immune to recompile-disease