1 unstable release
1.0.1 |
|
---|---|
0.1.1 | Jul 3, 2023 |
0.1.0 |
|
0.0.1 |
|
#871 in Unix APIs
8KB
129 lines
Simple Ring3 Memory RPM WPM Lib
This is a simple Rust library for performing Read Process Memory (RPM) and Write Process Memory (WPM) operations in Ring 3 on Windows. It allows you to read and write memory in a target process using its process ID (PID) and the base address of its main module.
Usage
use r3mem::r3mem;
fn main() {
let mut my_proc:r3mem::Proc = unsafe {std::mem::zeroed()};
my_proc.init("notepad.exe");
println!("PID = {} ImageBase = {:x}" , my_proc.pid , my_proc.image_base);
//Read Example
let _value: i32 = my_proc.read::<i32>(my_proc.image_base + 0x65000);
//Write Example
my_proc.write::<i32>(my_proc.image_base + 0x65000, _value);
my_proc.unint();
}
Todo
Add Injection Methods: CreateRemoteThread_LoadLibrary SetWindowHookEx ManualMapping Reflective Injection HijackThread and more
Written by
0xFF15#8049 (DarckAce007)
Made with <3
Dependencies
~129MB
~2M SLoC