[PhantomBlade]

Hello,

has anyone coded a tool for Process Hollowing before? I recently got interested in this but i can't really find anything that works in python (only C and C++).
Would be nice if someone could give me an explanation on how to do it in python or something like a source code to an example

[Flash7475]

From my understanding you wont be able to do this with python because the language is interpreted, too high level and has a lot of dependencies. While the language is good for a lot of things it wouldn't be great for this project because it cannot access memory like C and C++ can so this is why most people recommend C/C++.

[omar18881]

From my understanding you wont be able to do this with python because the language is interpreted, too high level and has a lot of dependencies. While the language is good for a lot of things it wouldn't be great for this project because it cannot access memory like C and C++ can so this is why most people recommend C/C++.

Totally Agreed 💯, you can also use .Net [C-Sharp or Visual Basic]

[omboml]

RunPE in python works fine if you build an executable with pyinstaller or py2exe: github.com/oueldz4/runpe
Windows RunPE is pure winapi stuff, you can even use vba to write RunPEs: github.com/itm4n/VBA-RunPE/blob/master/RunPE.vba