8000 GitHub - nevioo1337/Unmapper: Unmapper is a powerful tool that allows you to easily dump mapped PE files by hooking WriteProcessMemory.
[go: up one dir, main page]
More Web Proxy on the site http://driver.im/
Skip to content

Unmapper is a powerful tool that allows you to easily dump mapped PE files by hooking WriteProcessMemory.

Notifications You must be signed in to change notification settings

nevioo1337/Unmapper

< 8000 button type="button" aria-haspopup="true" aria-expanded="false" tabindex="0" class="prc-Button-ButtonBase-c50BI" data-loading="false" data-size="medium" data-variant="primary" aria-describedby=":R55ab:-loading-announcement" id=":R55ab:">Code

Repository files navigation

Unmapper

Unmapper is a powerful tool that allows you to easily dump mapped PE files by hooking WriteProcessMemory.

Screenshot 2023-05-09 191904

Usage

Inject the DLL before the mapping process begins. I will attach an image below that shows the optimal settings for the Xenos injector.

Screenshot 2023-05-09 191844

Project future

In the future, I plan to add a variety of features such as IPC and RPM hooks, a driver unmapper, a PE file type detector, and an auto binary assembler. My ultimate goal is to develop a fully-featured, easy-to-use dumper that can retrieve all the information you'll ever need.

Releases

No releases published

Packages

No packages published
0