Search Results for "pe loader"

sRDI is a compact project that implements a shellcode form of Reflective DLL Injection, enabling DLLs to be converted into position-independent shellcode and loaded in memory by a small in-process PE loader. The codebase groups a C implementation of a reflective PE loader with multiple loader/wrapper components (native C loader, a .NET loader, Python and PowerShell conversion helpers) so authors can produce and embed sRDI blobs in different environments. The loader aims to behave like a proper PE loader: it preserves section permissions, supports TLS callbacks, performs sanity checks, and exposes flags to control behaviors such as header clearing, memory wiping, import obfuscation, and whether the shellcode receives the base address. ...

Blackbone is a powerful Windows-focused memory manipulation and process interaction library intended for developers needing deep access to system internals, reverse engineering, or dynamic analysis tools. It provides a comprehensive API in C++ that allows allocation and management of virtual memory in local and remote processes, reading and writing remote process memory, enumerating loaded modules, creating and controlling threads, and performing complex pattern searches—all with support for...

Nothing more than an Operating System, that runs in Protected Mode and supports Multi-tasking and Multi-threading, with a nice GUI (sort of) + some basic drivers and Apps.... NOTE: It's out-of-date, the new version will be released soon.

This is a Linux kernel module and loader library to make the Portable Executables run natively to Linux. This will work as a replacement for WINE's execution method.

DeReIn is a simple windows command-line application that protects Portable Executable (PE) file content. The contents of the PE file are encrypted and added to a loader that carries out decryption and execution at runtime.