+- Hack Forums (https://hackforums.net)
+-- Forum: Tech (https://hackforums.net/forumdisplay.php?fid=444)
+--- Forum: Coding (https://hackforums.net/forumdisplay.php?fid=151)
+---- Forum: Software Development (https://hackforums.net/forumdisplay.php?fid=118)
+---- Thread: [Python] RunPE / Process Hollowing (/showthread.php?tid=6092442)
RunPE / Process Hollowing - PhantomBlade - Jul 4, 2020
Hello,
has anyone coded a tool for Process Hollowing before? I recently got interested in this but i can't really find anything that works in python (only C and C++).
Would be nice if someone could give me an explanation on how to do it in python or something like a source code to an example
RE: RunPE / Process Hollowing - Flash7475 - Jul 4, 2020
From my understanding you wont be able to do this with python because the language is interpreted, too high level and has a lot of dependencies. While the language is good for a lot of things it wouldn't be great for this project because it cannot access memory like C and C++ can so this is why most people recommend C/C++.
RE: RunPE / Process Hollowing - omar18881 - Jul 5, 2020
(Jul 4, 2020 01:19 PM)Flash7475 Wrote: From my understanding you wont be able to do this with python because the language is interpreted, too high level and has a lot of dependencies. While the language is good for a lot of things it wouldn't be great for this project because it cannot access memory like C and C++ can so this is why most people recommend C/C++.
Totally Agreed 💯, you can also use .Net [C-Sharp or Visual Basic]
RE: RunPE / Process Hollowing - omboml - Jul 11, 2020
RunPE in python works fine if you build an executable with pyinstaller or py2exe: github.com/oueldz4/runpe
Windows RunPE is pure winapi stuff, you can even use vba to write RunPEs: github.com/itm4n/VBA-RunPE/blob/master/RunPE.vba