Skip to content

comparing data of module exports from disk and memory, then caching any differences.

Notifications You must be signed in to change notification settings

ch4ncellor/Inline-PatchFinder

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

13 Commits
 
 
 
 
 
 
 
 

Repository files navigation

Inline-PatchFinder

Need to see if the process you're reversing/analyzing is patching/hooking any loaded module's exports? Well, look no further.

Inline-PatchFinder traverses the export table of all loaded modules in a process, and compares the first few bytes to the module on disk. If there is a difference between the one in memory and disk, you will be given relevant information.

ikFLJjM

Credits:

About

comparing data of module exports from disk and memory, then caching any differences.

Resources

Stars

Watchers

Forks

Packages

No packages published