1
- Blackbone
2
- =========
1
+ # Blackbone
3
2
4
- # Windows memory hacking library #
3
+ ### Windows memory hacking library
5
4
6
- ## Features ##
5
+ ## Features
7
6
8
- - x86 and x64 support
7
+ - ** x86 and x64 support**
9
8
10
- - ** Process interaction**
9
+ ** Process interaction**
11
10
- Manage PEB32/PEB64
12
11
- Manage process through WOW64 barrier
13
12
14
- - ** Process Memory**
13
+ ** Process Memory**
15
14
- Allocate and free virtual memory
16
15
- Change memory protection
17
16
- Read/Write virtual memory
18
17
19
- - ** Process modules**
18
+ ** Process modules**
20
19
- Enumerate all (32/64 bit) modules loaded. Enumerate modules using Loader list/Section objects/PE headers methods.
21
20
- Get exported function address
22
21
- Get the main module
@@ -25,7 +24,7 @@ Blackbone
25
24
- Inject 64bit modules into WOW64 processes
26
25
- Manually map native PE images
27
26
28
- - ** Threads**
27
+ ** Threads**
29
28
- Enumerate threads
30
29
- Create and terminate threads. Support for cross-session thread creation.
31
30
- Get thread exit code
@@ -35,22 +34,22 @@ Blackbone
35
34
- Suspend and resume threads
36
35
- Set/Remove hardware breakpoints
37
36
38
- - ** Pattern search**
37
+ ** Pattern search**
39
38
- Search for arbitrary pattern in local or remote process
40
39
41
- - ** Remote code execution**
40
+ ** Remote code execution**
42
41
- Execute functions in remote process
43
42
- Assemble own code and execute it remotely
44
43
- Support for cdecl/stdcall/thiscall/fastcall conventions
45
44
- Support for arguments passed by value, pointer or reference, including structures
46
45
- FPU types are supported
47
46
- Execute code in new thread or any existing one
48
47
49
- - ** Remote hooking**
48
+ ** Remote hooking**
50
49
- Hook functions in remote process using int3 or hardware breakpoints
51
50
- Hook functions upon return
52
51
53
- - ** Manual map features**
52
+ ** Manual map features**
54
53
- x86 and x64 image support
55
54
- Mapping into any arbitrary unprotected process
56
55
- Section mapping with proper memory protection flags
@@ -71,10 +70,9 @@ Blackbone
71
70
- C++/CLI images are supported
72
71
- Image unloading
73
72
- Increase reference counter for import libraries in case of manual import mapping
74
- - Cyclic dependencies are handled properly
73
+ - Cyclic dependencies are handled properly
75
74
76
-
77
- - ** Driver features**
75
+ ** Driver features**
78
76
- Allocate/free/protect user memory
79
77
- Read/write user and kernel memory
80
78
- Disable permanent DEP for WOW64 processes
@@ -86,4 +84,9 @@ Blackbone
86
84
- Manual mapping of drivers
87
85
88
86
## License ##
89
- Blackbone is licensed under the MIT License. Dependencies are under their respective licenses.
87
+ Blackbone is licensed under the MIT License. Dependencies are under their respective licenses.
88
+
89
+ [ ![ Build status] ( https://ci.appveyor.com/api/projects/status/5lu9aw84t00ibkdo/branch/master?svg=true )] ( https://ci.appveyor.com/project/DarthTon/blackbone-q21rd/branch/master )
90
+ [ ![ Build status] ( https://ci.appveyor.com/api/projects/status/5lu9aw84t00ibkdo/branch/master?svg=true )] ( https://ci.appveyor.com/project/DarthTon/blackbone-q21rd/branch/VS2017 )
91
+
92
+ [ ![ Build status] ( https://ci.appveyor.com/api/projects/status/5lu9aw84t00ibkdo?svg=true )] ( https://ci.appveyor.com/project/DarthTon/blackbone-q21rd )
0 commit comments