GoGhosting

Process ghosting using Golang

Special Thanks:

https://github.com/hasherezade/ — For coming up with the first public PoC (to my knowledge)

https://www.elastic.co/blog/process-ghosting-a-new-executable-image-tampering-attack — Original writeup of this technique

GitHub

View Github