A POC for the new injection technique, abusing windows fork API to evade EDRs. https://www.blackhat.com/eu-22/briefings/schedule/index.html#dirty-vanity-a-new-approach-to-code-injection--edr-bypass-28417
Appears on
Quick read
Latest capture 2026-07-29 03:08
0 paths
Agent instructions and tool configuration found in this repository.
No config files detected.
3 observed captures since 2026-06-24. Charts use measured snapshots only.
Stars from first capture +3
All tracked data
Observed snapshots
Observed snapshots
Nearest indexed repositories by embedding similarity.
early cascade injection PoC based on Outflanks blog post
This program is designed to demonstrate various process injection techniques
BattlEye compatible injector, done completely from user-mode.
BattlEye compatible injector, done completely from user-mode, project by secret.club
A Windows user-mode shellcode execution tool that demonstrates various techniques that malware uses
kernel-mode DLL Injector
