After several weeks of fighting the Windows api, ShenCode 0.8.0 is out now. There are 3 new injection modules:

  • DLL-Injection
  • NtInjection
  • Process_Overwriting

Process_Overwriting is a Python adaption of hasherezades PoC. It felt a bit like pain in the ass, because I had some struggle to understand the technique. Afterwards it was a big learning for me in understanding PE and how Windows handles it in Memory.

If you like it, please leave me a star:

psycore8/shencode

Updated: