Custom-GetProcAddress

MalwareEvasionTechniques

abdouroumi/malwareevasiontechniques

Research project showcasing various malware evasion techniques used to bypass AVs and EDRs, continuously updated with new methods.

Early_Bird_APC_Injection

abdouroumi/early_bird_apc_injection

Code injection via Asynchronous Procedure Calls to bypass Windows defenses. Mapped to MITRE ATT&CK T1055.004.(Process Injection: Asynchronous Procedure Call).

R0m4NTAPI

abdouroumi/r0m4ntapi

Native API injector

GpuAbuser-Malware

abdouroumi/gpuabuser-malware

Research in progress: A malware that abuses the GPU to accelerate the decryption process.

PE_Inspector

abdouroumi/pe_inspector

A powerful PE file inspector for analyzing Portable Executable binaries, providing detailed insights into their structure, headers, and properties

Local-And-Remote_Function_Stomping

abdouroumi/local-and-remote_function_stomping

Function Stomping (MITRE ATT&CK ID: T1055.012) — Advanced injection technique overwriting legitimate functions with custom payloads to evade detection. Research & Educational purposes only