This project is about different malware development techniques for AV and Defense evasion using C#.

API calling methodologies using:

• PInvoke (Platform Invoke) https://www.pinvoke.net/. Calling Win32 and other unmanaged APIs from managed code.

• DInvoke (Dynamic Invoke) https://thewover.github.io/Dynamic-Invoke/. Dynamically invoke unmanaged code from memory or disk while avoiding API Hooking, suspicious imports and having an Import table in the payload, evading EDR and AV scan interfaces.

• Process Hollowing
• Process Injection
• Reflective DLL Injection

• Process Hollowing
• Process Injection
• Dynamic Process Injection
• Suspended Thread Injection

• AES (Advanced Encryption Standard)
• XOR (Exclusive OR)
• Caesar Cipher

git clone https://github.com/GeorgePatsias/PayloadFactory.git

• https://github.com/TheWover/DInvoke
• https://github.com/dotnet/pinvoke