{"adoption": {"forks": 191, "observed_at": "2026-08-28T04:04:09.897280+00:00", "stars": 1259}, "canonical_url": "https://ross.abutalabs.com/products/processinjection", "card": {"archived": false, "artifact_type": "cli-tool", "description": "This program is designed to demonstrate various process injection techniques", "domain": ["security", "penetration-testing", "windows"], "enriched": true, "function": ["security", "penetration-testing", "cli"], "health_score": 41, "homepage": null, "language": "C#", "license": "GPL-3.0", "license_family": "copyleft", "maturity": "active", "member_repos": ["3xpl01tc0d3r/ProcessInjection"], "name": "3xpl01tc0d3r/ProcessInjection", "platform": ["windows", "cli", "dotnet"], "pushed_at": "2025-08-07T19:46:49+00:00", "repo": "3xpl01tc0d3r/ProcessInjection", "stars": 1259, "tags": ["process-injection", "shellcode", "offensive-security", "red-team", "defense-evasion", "syscalls", "d-invoke"], "topics": [], "urls": [], "use_cases": ["inject shellcode into a remote process on windows", "perform process hollowing for red team exercises", "test EDR detection of process injection techniques", "execute shellcode with direct syscalls to evade hooks", "demonstrate DLL injection and APC queue injection", "encrypt shellcode with AES or XOR before injection"], "what_it_is": "A C# command-line tool that demonstrates and performs multiple Windows process injection techniques, including DLL injection, process hollowing, APC queue, and KernelCallbackTable injection. It supports shellcode in several formats, multiple invocation methods (P/Invoke, D/Invoke, direct and indirect syscalls), and evasion features like parent PID spoofing and XOR/AES shellcode encryption.", "when_to_avoid": ["you need a defensive detection tool rather than an offensive one", "you target non-Windows platforms", "you want a maintained production-grade framework rather than a demonstration tool"], "when_to_choose": ["you need a single tool covering many process injection techniques", "you want to compare P/Invoke, D/Invoke, and syscall-based injection", "you are doing red team tooling or security research on Windows"]}, "data_as_of": "2026-08-30T08:39:29.467469+00:00", "members": [{"path": "/products/processinjection", "repo": "3xpl01tc0d3r/ProcessInjection", "role": "main", "score": 48}], "provenance": {"archived": {"kind": "observed", "observed_at": "2026-08-28T04:04:09.897280+00:00", "source": "github"}, "artifact_type": {"confidence": null, "enriched_at": "2026-08-30T05:04:26.113506+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "925ccf91f15716746b0c09a72c5cfc682afdcef3bbf81c530fb78c60ec563d48", "fetched_at": "2026-08-28T04:04:09.897280+00:00", "kind": "readme", "missing": false, "url": "https://github.com/3xpl01tc0d3r/ProcessInjection"}], "taxonomy_version": 1}, "description": {"kind": "observed", "observed_at": "2026-08-28T04:04:09.897280+00:00", "source": "github"}, "domain": {"confidence": null, "enriched_at": "2026-08-30T05:04:26.113506+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "925ccf91f15716746b0c09a72c5cfc682afdcef3bbf81c530fb78c60ec563d48", "fetched_at": "2026-08-28T04:04:09.897280+00:00", "kind": "readme", "missing": false, "url": "https://github.com/3xpl01tc0d3r/ProcessInjection"}], "taxonomy_version": 1}, "enriched": {"inputs": [], "kind": "computed", "method": "enrichment_status"}, "function": {"confidence": null, "enriched_at": "2026-08-30T05:04:26.113506+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "925ccf91f15716746b0c09a72c5cfc682afdcef3bbf81c530fb78c60ec563d48", "fetched_at": "2026-08-28T04:04:09.897280+00:00", "kind": "readme", "missing": false, "url": "https://github.com/3xpl01tc0d3r/ProcessInjection"}], "taxonomy_version": 1}, "health_score": {"inputs": ["days_since_push", "days_since_release", "archived"], "kind": "computed", "method": "health_v1"}, "homepage": {"kind": "observed", "observed_at": "2026-08-28T04:04:09.897280+00:00", "source": "github"}, "language": {"kind": "observed", "observed_at": "2026-08-28T04:04:09.897280+00:00", "source": "github"}, "license": {"kind": "observed", "observed_at": "2026-08-28T04:04:09.897280+00:00", "source": "github"}, "license_family": {"inputs": ["license"], "kind": "computed", "method": "license_family"}, "maturity": {"confidence": null, "enriched_at": "2026-08-30T05:04:26.113506+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "925ccf91f15716746b0c09a72c5cfc682afdcef3bbf81c530fb78c60ec563d48", "fetched_at": "2026-08-28T04:04:09.897280+00:00", "kind": "readme", "missing": false, "url": "https://github.com/3xpl01tc0d3r/ProcessInjection"}], "taxonomy_version": 1}, "member_repos": {"kind": "observed", "observed_at": "2026-08-28T04:04:09.897280+00:00", "source": "github"}, "name": {"kind": "observed", "observed_at": "2026-08-28T04:04:09.897280+00:00", "source": "github"}, "platform": {"confidence": null, "enriched_at": "2026-08-30T05:04:26.113506+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "925ccf91f15716746b0c09a72c5cfc682afdcef3bbf81c530fb78c60ec563d48", "fetched_at": "2026-08-28T04:04:09.897280+00:00", "kind": "readme", "missing": false, "url": "https://github.com/3xpl01tc0d3r/ProcessInjection"}], "taxonomy_version": 1}, "pushed_at": {"kind": "observed", "observed_at": "2026-08-28T04:04:09.897280+00:00", "source": "github"}, "repo": {"kind": "observed", "observed_at": "2026-08-28T04:04:09.897280+00:00", "source": "github"}, "stars": {"kind": "observed", "observed_at": "2026-08-28T04:04:09.897280+00:00", "source": "github"}, "tags": {"confidence": null, "enriched_at": "2026-08-30T05:04:26.113506+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "925ccf91f15716746b0c09a72c5cfc682afdcef3bbf81c530fb78c60ec563d48", "fetched_at": "2026-08-28T04:04:09.897280+00:00", "kind": "readme", "missing": false, "url": "https://github.com/3xpl01tc0d3r/ProcessInjection"}], "taxonomy_version": 1}, "topics": {"kind": "observed", "observed_at": "2026-08-28T04:04:09.897280+00:00", "source": "github"}, "urls": {"kind": "observed", "observed_at": "2026-08-28T04:04:09.897280+00:00", "source": "github"}, "use_cases": {"confidence": null, "enriched_at": "2026-08-30T05:04:26.113506+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "925ccf91f15716746b0c09a72c5cfc682afdcef3bbf81c530fb78c60ec563d48", "fetched_at": "2026-08-28T04:04:09.897280+00:00", "kind": "readme", "missing": false, "url": "https://github.com/3xpl01tc0d3r/ProcessInjection"}], "taxonomy_version": 1}, "what_it_is": {"confidence": null, "enriched_at": "2026-08-30T05:04:26.113506+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "925ccf91f15716746b0c09a72c5cfc682afdcef3bbf81c530fb78c60ec563d48", "fetched_at": "2026-08-28T04:04:09.897280+00:00", "kind": "readme", "missing": false, "url": "https://github.com/3xpl01tc0d3r/ProcessInjection"}], "taxonomy_version": 1}, "when_to_avoid": {"confidence": null, "enriched_at": "2026-08-30T05:04:26.113506+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "925ccf91f15716746b0c09a72c5cfc682afdcef3bbf81c530fb78c60ec563d48", "fetched_at": "2026-08-28T04:04:09.897280+00:00", "kind": "readme", "missing": false, "url": "https://github.com/3xpl01tc0d3r/ProcessInjection"}], "taxonomy_version": 1}, "when_to_choose": {"confidence": null, "enriched_at": "2026-08-30T05:04:26.113506+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "925ccf91f15716746b0c09a72c5cfc682afdcef3bbf81c530fb78c60ec563d48", "fetched_at": "2026-08-28T04:04:09.897280+00:00", "kind": "readme", "missing": false, "url": "https://github.com/3xpl01tc0d3r/ProcessInjection"}], "taxonomy_version": 1}}, "score": {"components": {"activity": 35, "longevity": 100, "rhythm": 35}, "computed_at": "2026-09-03T02:20:16.233290+00:00", "flags": ["no_releases"], "formula": "round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)", "inputs": {"age_days": 2559, "days_push": 391, "days_rel": null, "gap_med": null, "n_releases_24m": 0}, "score": 48, "version": 2}, "staleness": {"enrichment_outdated": false, "low_confidence": false, "scrape_days": 9, "stale_scrape": false}}