Skip to content

Finding Externally Allocated Executable Memory, Byfron's Way.

License

Notifications You must be signed in to change notification settings

etwhook/ByfronXMemChecks

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

3 Commits
 
 
 
 
 
 
 
 
 
 

Repository files navigation

ByfronXMemChecks

Finding Externally Allocated Executable Memory, Byfron's Way.

Whitelisting Internal Allocations

I haven't implemented this part of byfron's memory checks, But if you want a hint to try implement it yourself, Try hooking NtAllocateVirtualMemory and make it append the allocated memory's address to an array / list / vector which will determine if its whitelisted or not.

About

Finding Externally Allocated Executable Memory, Byfron's Way.

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages