Skip to content

About

API to work with Win32 process memory and hardware breakpoints

Resources

Stars

27 stars

Watchers

7 watching

Forks

Latest commit

 

History

108 Commits

Folders and files

Repository files navigation

WhiteMagic

API to work with Win32 process memory and hardware breakpoints

Targets .NET 10. Uses Iced (https://github.com/icedland/iced) to assemble remote-call shellcode.

Capabilities:

  • Read/write process memory
  • Suspend/resume process thread(s)
  • Call remote process functions or assembled code (using remote thread injection)
  • Attach hardware breakpoints to remote processes
  • Search for data patterns in remote process' memory
  • Hooks mouse and keyboard events
  • ...

About

API to work with Win32 process memory and hardware breakpoints

Resources

Stars

27 stars

Watchers

7 watching

Forks

Releases

Packages

Used by

Contributors

Languages