Skip to content

GhostLoader - AppDomainManager - Injection - 攻壳机动队

Notifications You must be signed in to change notification settings

rvrsh3ll/GhostLoader

 
 

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

8 Commits
 
 
 
 
 
 

Repository files navigation

A fork from subTee, who seems to have removed the original short-lived public repo. Not my work. If you're reading this subTee and want me to take it down, I will. Didn't mean to host some private code of yours.

GhostLoader

GhostLoader - AppDomainManager - Injection - 攻壳机动队

GhostLoader Steps :)

1. Create C:\Tools
2. Copy Some .NET, any .NET binary to C:\Tools
3. In this example, we use FileHistory.exe, but any .NET app will do.
4. Ensure FileHistory.exe.config is in the same path
5. Execute C:\Tools\FileHistory.exe

Does your tool/product detect/observe the Image Load Event?

The purpose of this example is to demonstrate a way to circumvent, tools that catch/prevent ImageLoad events.

About

GhostLoader - AppDomainManager - Injection - 攻壳机动队

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages

  • C# 100.0%