mirror of
https://github.com/hasherezade/hollows_hunter.git
synced 2026-10-12 02:15:21 +00:00
4f1b6355da3ab5fb0eb9a2db7551695697c5ee3e
hollows_hunter
A process scanner detecting and dumping hollowed PE modules.
Uses PE-sieve (DLL version): https://github.com/hasherezade/pe-sieve.git
WARNING: This is an early beta version. Bugs? Remarks? Mail me: [email protected]
Clone:
Use recursive clone to get the repo together with all the submodules:
git clone --recursive https://github.com/hasherezade/hollows_hunter.git
Description
Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).
Readme
BSD-2-Clause
17 MiB
Languages
C
52.2%
C++
45.4%
CMake
2.3%
Shell
0.1%