Awesome GitHub RepositoriesDLL Injection Techniques

WeChatFerry is a platform-specific automation tool designed for programmatic account and conversation management. It enables the creation of bots and the integration of large language models to provide automated replies within a messaging interface. The project functions by using native API interception and memory-based hooking to capture incoming communication and send messages without an official API. It includes capabilities for binary data decryption to transform protected media files and database records into readable formats. The system covers a broad range of functional areas, includi

Detours is a library for intercepting Win32 API calls and redirecting function calls at runtime on Windows, enabling binary-level instrumentation without requiring access to the original source code. It functions as an API hooking library and binary instrumentation toolkit, allowing developers to monitor or modify the behavior of compiled Windows binaries by hooking into their function execution paths. The project achieves this through detour-based function interception, where the first few instructions of a target function are replaced with a jump to a user-supplied detour function, while pr

ScyllaHide هو إضافة لتجاوز مصححات الأخطاء (anti-debugger) وأداة للهندسة العكسية مصممة لإخفاء المصحح عن التطبيق المستهدف. يعمل كمكتبة ربط (hooking) لواجهة برمجة تطبيقات في وضع المستخدم وإطار عمل لحقن ملفات DLL يمنع البرامج من اكتشاف نفسها وإغلاقها عند تحليلها. يمكّن المشروع من تحليل البرمجيات الخبيثة ودراسة البرامج المحمية عن طريق تحييد الدفاعات الأمنية. يحقق ذلك من خلال اعتراض وتعديل استجابات مكتبة النظام لخداع التطبيقات بشأن بيئة تنفيذها. تستخدم الأداة عدة طرق تقنية للحفاظ على التخفي، بما في ذلك ربط واجهة برمجة التطبيقات المضمن (inline API hooking)، ووكيل استدعاء النظام، وتصحيح كتلة بيئة العملية (PEB). كما تتعامل مع اعتراضات وضع المستخدم وتستخدم إعادة توجيه المكتبة الديناميكية لتصفية استجابات واجهة برمجة التطبيقات الحساسة.

ExplorerBlurMica is a system utility designed to apply transparency, blur, and material design effects to standard Windows desktop interface elements. It functions as a window effect injector and visual modifier specifically for the Windows File Explorer and other shell windows. The tool provides customization of background visual effects, including the addition of acrylic and mica transparency. It allows for the definition of specific blend colors for backgrounds and includes an adaptation system that synchronizes visual styles with the current operating system theme settings.

OffensiveRust is a red team toolkit and malware development kit written in Rust. It serves as an evasion framework and post-exploitation library, providing a collection of offensive security primitives and a Windows API wrapper for interacting with low-level system functions and undocumented APIs. The project focuses on bypassing security software through direct system calls, memory obfuscation, and stealthy payload execution. It implements techniques to defeat static binary analysis via compile-time string encryption and payload obfuscation, while avoiding detection using parent process ID s