Ecosyste.ms: Awesome

An open API service indexing awesome lists of open source software.

Awesome Lists | Featured Topics | Projects

https://github.com/yekuuun/mapexec

advanced payload loader using mapping injection & obfuscation techniques
https://github.com/yekuuun/mapexec

cpp injection malware mappinginject shellcode

Last synced: 12 days ago
JSON representation

advanced payload loader using mapping injection & obfuscation techniques

Awesome Lists containing this project

README

        

```C

_____ ______ ________ ________ _______ ___ ___ _______ ________
|\ _ \ _ \|\ __ \|\ __ \|\ ___ \ |\ \ / /|\ ___ \ |\ ____\
\ \ \\\__\ \ \ \ \|\ \ \ \|\ \ \ __/| \ \ \/ / | \ __/|\ \ \___|
\ \ \\|__| \ \ \ __ \ \ ____\ \ \_|/__ \ \ / / \ \ \_|/_\ \ \
\ \ \ \ \ \ \ \ \ \ \ \___|\ \ \_|\ \ / \/ \ \ \_|\ \ \ \____
\ \__\ \ \__\ \__\ \__\ \__\ \ \_______\/ /\ \ \ \_______\ \_______\
\|__| \|__|\|__|\|__|\|__| \|_______/__/ /\ __\ \|_______|\|_______|
|__|/ \|__|

-------advanced mapping injection for x64 processes------

```

> [!Important]
> This repository was created to apply various techniques I discovered during the MalDev Academy learning path, addressing different subjects covered in its modules. I’m still learning and consider this project a personal challenge and a foundation for practice.

## Usage

**Mapexec is a base payload loader using mapping injection technique. to improve it, I didn't use any imports & buildt all code by myself using personnal ressources.**


## You'il find :

- `Obfuscated payload using XOR (basic)`
- `Hand crafted WIN headers`
- `Custom GetModuleHandleW & GetProcAddress using API HASH's avoiding clear text suspicious naming`
- `Mapping injection technique using CreateFileMap, MapViewOfFile, MapViewOfFile3`
- `Use of NT functions`
- `NO IMPORTS`

---

## Sample :

DebugInfo

---

## Build :

- `cd mapexec`
- `mkdir build`
- `cd build`
- `cmake ..`
- `cmake --build .`

- **Run exe file using PID as arg =>** `./mapexec `

---

> [!Warning]
> This repository was made for learning purpose only.

---

### Ressources for mapexec :

- Maldev Academy
- Hasherezade
- Arsium