Skip to content

code for loading memory module bypassing windows PE loader

Notifications You must be signed in to change notification settings

yoohooyoo/mmLoader

 
 

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

12 Commits
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

mmLoader

Load memory module.

mmLoader is used for loaing dll module from memory directly. It can bypass the windows system PE loader load and load module into process address sapce. Also it will process all the import tables and reloaction table.

You can just include the mmLoader\mmLoader folder as source file in your projects, or just copy files in that folder to your projects.

Threre are two way to use it.

  1. Use the source code: See also LoaderDemoExe\LoaderDemoExe.cpp

  2. Use the shell code: See also mmLoaderShellCodeDemo\mmLoaderShellCodeDemo.cpp

About

code for loading memory module bypassing windows PE loader

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages

  • C++ 83.0%
  • C 14.9%
  • Objective-C 2.1%