1 unstable release

1.0.1 Jul 3, 2023
0.1.1 Jul 3, 2023
0.1.0 Jul 3, 2023
0.0.1 Jul 3, 2023

#871 in Unix APIs

MIT license

8KB
129 lines

Simple Ring3 Memory RPM WPM Lib

This is a simple Rust library for performing Read Process Memory (RPM) and Write Process Memory (WPM) operations in Ring 3 on Windows. It allows you to read and write memory in a target process using its process ID (PID) and the base address of its main module.

Usage

use r3mem::r3mem;

fn main() {

    
    let mut my_proc:r3mem::Proc =  unsafe {std::mem::zeroed()};
            my_proc.init("notepad.exe");
            println!("PID = {} ImageBase = {:x}" , my_proc.pid , my_proc.image_base);

            //Read Example
            let _value: i32 = my_proc.read::<i32>(my_proc.image_base + 0x65000);

            //Write Example
            my_proc.write::<i32>(my_proc.image_base + 0x65000, _value);
            my_proc.unint();
    
}

Todo

Add Injection Methods: CreateRemoteThread_LoadLibrary SetWindowHookEx ManualMapping Reflective Injection HijackThread and more

Written by

0xFF15#8049 (DarckAce007)

Made with <3

Dependencies

~129MB
~2M SLoC