███▄ █ █ ██ ██▓ ██▓ ██████ ▓█████ ▄████▄
██ ▀█ █ ██ ▓██▒▓██▒ ▓██▒ ▒██ ▒ ▓█ ▀ ▒██▀ ▀█
▓██ ▀█ ██▒▓██ ▒██░▒██░ ▒██░ ░ ▓██▄ ▒███ ▒▓█ ▄
▓██▒ ▐▌██▒▓▓█ ░██░▒██░ ▒██░ ▒ ██▒▒▓█ ▄ ▒▓▓▄ ▄██▒
▒██░ ▓██░▒▒█████▓ ░██████▒░██████▒▒██████▒▒░▒████▒▒ ▓███▀ ░
░ ▒░ ▒ ▒ ░▒▓▒ ▒ ▒ ░ ▒░▓ ░░ ▒░▓ ░▒ ▒▓▒ ▒ ░░░ ▒░ ░░ ░▒ ▒ ░
░ ░░ ░ ▒░░░▒░ ░ ░ ░ ░ ▒ ░░ ░ ▒ ░░ ░▒ ░ ░ ░ ░ ░ ░ ▒
░ ░ ░ ░░░ ░ ░ ░ ░ ░ ░ ░ ░ ░ ░ ░
░ ░ ░ ░ ░ ░ ░ ░ ░ ░
░ ░ ░ ░
▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
█░░░░░░░░░░░░░░░░ I N J E C T O R ░░░░░░░░░░░░░░░░░░░░░░░░█
▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
bad-antics
nullsec-injector is a process memory injector and code execution tool written in Odin. Combines low-level memory access with a clean, modern syntax for reliable shellcode and DLL injection.
- 💉 Shellcode Injection - Multiple injection techniques
- 📚 DLL Injection - Remote DLL loading
- 🧵 Thread Hijacking - Existing thread manipulation
- 🔄 Process Hollowing - Replace process memory
- 🎭 APC Injection - Asynchronous procedure calls
- 📋 Module Enumeration - List loaded modules
- Odin compiler (latest)
- Linux or Windows
- Root/Administrator privileges
# Clone repository
git clone https://github.com/bad-antics/nullsec-injector.git
cd nullsec-injector
# Build
odin build injector.odin -out:injector
# Or run directly
odin run injector.odin# Shellcode injection
./injector inject -p 1234 -s shellcode.bin
# DLL injection
./injector dll -p 1234 -d payload.dll
# Thread hijacking
./injector hijack -p 1234 -s shellcode.bin
# Process hollowing
./injector hollow -t target.exe -s payload.exe
# Enumerate modules
./injector modules -p 1234| Flag | Description |
|---|---|
-p, --pid |
Target process ID |
-s, --shellcode |
Shellcode file path |
-d, --dll |
DLL file path |
-t, --target |
Target executable |
--method |
Injection method |
-v, --verbose |
Verbose output |
- Classic VirtualAllocEx + CreateRemoteThread
- NtCreateThreadEx (stealthier)
- Thread context manipulation
- LoadLibrary via CreateRemoteThread
- Manual mapping (no LoadLibrary)
- Reflective DLL injection
- Process hollowing (RunPE)
- APC injection (alertable threads)
- Thread execution hijacking
This tool is intended for authorized security testing and educational purposes only. Unauthorized code injection is illegal.
NullSec Proprietary License
bad-antics - NullSec Security Team
Part of the NullSec Security Toolkit
bad-antics
- GitHub: @bad-antics
- Website: bad-antics.github.io
- Discord: discord.gg/killers
Part of the NullSec Security Framework