All Projects → hasherezade → Process_chameleon

hasherezade / Process_chameleon

A process overwriting its own PEB to make an illusion that it has been loaded from a different path.

Programming Languages

c
50402 projects - #5 most used programming language

Process Chameleon

Build status

This is my "lil_calc" PoC presented on the video:
Test with ProcessExplorer vs TaskManager
It is not FUD, but it can fool some tools and it can be used as a test case. The process overwrites its own PEB to create an illusion, that it has been loaded from a different path.

Note that the project description data, including the texts, logos, images, and/or trademarks, for each open source project belongs to its rightful owner. If you wish to add or remove any projects, please contact us at [email protected].