All Projects → scythe-io → memory-module-loader

scythe-io / memory-module-loader

Licence: MPL-2.0 license
An implementation of a Windows loader that can load dynamic-linked libraries (DLLs) directly from memory

Programming Languages

c
50402 projects - #5 most used programming language

Projects that are alternatives of or similar to memory-module-loader

Fet Loader
moved to gitlab.com/FETLoader
Stars: ✭ 27 (-75.68%)
Mutual labels:  dll, loader
react-intl-loader
Async react-intl locale data loader for webpack
Stars: ✭ 46 (-58.56%)
Mutual labels:  loader
ngx-loader-indicator
Awesome loader for angular applications. No wrappers only you elements
Stars: ✭ 44 (-60.36%)
Mutual labels:  loader
Prevailer-orientation-support-library-for-Android
Prevailer is a simple android library that helps in preserving object instances across orientation change in android and is JAVA 8 and MVP ready.
Stars: ✭ 17 (-84.68%)
Mutual labels:  loader
tiny-skeleton-loader-react
zero dependency, ultra lightweight (1KB gzipped) skeleton loader component for react 🐥
Stars: ✭ 28 (-74.77%)
Mutual labels:  loader
moonlight-admin
Easy to use admin panel, designed for cheat loaders.
Stars: ✭ 29 (-73.87%)
Mutual labels:  loader
Godot3-Win64-LSW-Build
Modularized build of Godot 3 ( Win x64 ) with MSVC without SCons will be updated after Godot 4 is published
Stars: ✭ 18 (-83.78%)
Mutual labels:  dll
rprogress
React ajax loader progress bar with clear API
Stars: ✭ 12 (-89.19%)
Mutual labels:  loader
maalik
Feature-rich Post Exploitation Framework with Network Pivoting capabilities.
Stars: ✭ 75 (-32.43%)
Mutual labels:  dll
react-native-less-transformer
Use Less to style your React Native apps.
Stars: ✭ 26 (-76.58%)
Mutual labels:  loader
SharpUnhooker
C# Based Universal API Unhooker
Stars: ✭ 255 (+129.73%)
Mutual labels:  dll
singlefile
featured cs:go internal hack, one file and less than 1000 lines.
Stars: ✭ 47 (-57.66%)
Mutual labels:  dll
favicon-canvas-loader
Create and display a circular loading <canvas> animation as a webpage favicon.
Stars: ✭ 83 (-25.23%)
Mutual labels:  loader
ReverseShellDll
C++ Windows Reverse Shell - Universal DLL Hijack | SSL Encryption | Statically Linked
Stars: ✭ 69 (-37.84%)
Mutual labels:  dll
KVSpinnerView
KVSpinnerView is highly customizable progress HUD
Stars: ✭ 37 (-66.67%)
Mutual labels:  loader
pe-loader
A Windows PE format file loader
Stars: ✭ 81 (-27.03%)
Mutual labels:  loader
core
An advanced and highly optimized Java library to build frameworks: it's useful for scanning class paths, generating classes at runtime, facilitating the use of reflection, scanning the filesystem, executing stringified source code and much more...
Stars: ✭ 100 (-9.91%)
Mutual labels:  loader
jvm-dump-proxy
A proxy DLL for Windows to dump JVM classes at JNI level
Stars: ✭ 53 (-52.25%)
Mutual labels:  dll
SnifferIH
DLL Hooking Packet Sniffer
Stars: ✭ 15 (-86.49%)
Mutual labels:  dll
Caesar
Open source cheat for Steam version of Counter-Strike 1.6.
Stars: ✭ 22 (-80.18%)
Mutual labels:  dll

memory-module-loader

memory-module-loader is an implementation of a Windows loader that can load dynamic-link libraries (DLLs) directly from memory.

The loader exposed by the Windows operating system can only load modules from disk via LoadLibrary or LoadLibraryEx. However, it is entirely possible to load libraries from memory instead. This is one such implementation. This loader supports loading resources. as well.

Authors

  • Originally forked by Benjamin Dagana from https://github.com/fancycode/MemoryModule circa summer 2016.
  • Updated by Ateeq Sharfuddin to support TLS.
  • Updated by Jonathan Lim to support AMD64.
  • Updated by Ateeq Sharfuddin to include example and documentation.

License

Please review the file LICENSE in this repository.

Details

  1. The cloader project compiles into a static library.
  2. As an example, a small sample dll is provided.
  3. A sample executable is provided that links with the cloader. This executable loads sample-dll and calls a function.

Building from source

Open cloader.sln in Visual Studio 2019 and build the solution. The output will be placed under the bin directory.

Functions

LoadModuleFromMemory

Similar to LoadLibrary, but loads the module from memory instead.

_GetProcAddress

Similar to GetProcAddress, but usable only for modules loaded by LoadModuleFromMemory.

FreeLibraryResources

Similar to FreeLibrary, but use only for modules loaded by LoadModuleFromMemory.

_FindResource

Similar to FindResource, but use only to find resources in modules loaded by LoadModuleFromMemory.

_LoadResource

Similar to LoadResource, but use only to load resources in modules loaded by LoadModuleFromMemory. In this case, you do not need to call LockResource: This function simply returns you the address of the resource instead of an HGLOBAL object.

_SizeofResource

Similar to SizeofResource, but use only for resources in modules loaded by LoadModuleFromMemory.

Layout

memory-module-loader
|   cloader.sln
|   LICENSE
|   README.md
|
\---src
    +---cloader
    |       cloader.vcxproj
    |       cloader.vcxproj.filters
    |       common.h
    |       moduleloader.c
    |       moduleloader.h
    |
    +---sample-dll
    |       common.h
    |       dllmain.cpp
    |       sample-dll.c
    |       sample-dll.def
    |       sample-dll.vcxproj
    |       sample-dll.vcxproj.filters
    |
    \---sample-exe
            sample-exe.c
            sample-exe.vcxproj
            sample-exe.vcxproj.filters
Note that the project description data, including the texts, logos, images, and/or trademarks, for each open source project belongs to its rightful owner. If you wish to add or remove any projects, please contact us at [email protected].