2 个仓库
Utilities for creating new memory regions within a target process for storing dynamic data.
Distinct from Memory Allocators: Existing candidates focus on kernel-level allocation strategies or specific runtimes like WASM, rather than debugger-driven memory allocation in a target process.
Explore 2 awesome GitHub repositories matching operating systems & systems programming · Process Memory Allocation. Refine with filters or upvote what's useful.
Blackbone 是一套专门用于内存扫描、进程注入和内核驱动接口的工具集合,用于操纵 Windows 执行环境。它提供了一个用于执行远程代码、映射可执行映像以及跨不同进程边界管理线程的框架。 该项目包含一个内核内存驱动程序,用于访问内核内存并修改句柄权限,从而在用户模式检测中隐藏分配。它还具有一个库,用于使用软件中断和硬件断点拦截远程进程中的函数调用。 该工具包涵盖了虚拟内存操作的更广泛功能,例如在本地或远程进程中读取、写入和分配内存。它还提供了用于定位特定字节序列的内存模式搜索实用程序,以及用于注入或卸载二进制文件的模块管理功能。
Creates and modifies memory regions within target processes for storing dynamic data.
PINCE is a dynamic debugger, instruction tracer, and memory scanner designed for the analysis and manipulation of running processes. It functions as a process memory manipulator and editor, allowing for the identification, modification, and monitoring of values within a target application's active memory. The tool distinguishes itself through memory pointer analysis, tracing addresses and offsets to locate static pointers that lead to dynamic data across different sessions. It also enables the execution of internal functions within a running process by manipulating the instruction pointer and
Allows for the allocation of new memory regions within a running process for strings or arrays.