• Stars
    star
    145
  • Rank 246,374 (Top 5 %)
  • Language
    Assembly
  • License
    MIT License
  • Created almost 6 years ago
  • Updated over 2 years ago

Reviews

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Repository Details

Small tool to run ELF binaries from memory with a given process name

memrun

Small tool written in Golang to run ELF (x86_64) binaries from memory with a given process name. Works on Linux where kernel version is >= 3.17 (relies on the memfd_create syscall).

Usage

Build it with $ go build memrun.go and execute it. The first argument is the process name (string) you want to see in ps auxww output for example. Second argument is the path for the ELF binary you want to run from memory.

Usage: memrun process_name elf_binary

More Repositories

1

virii

Collection of ancient computer virus source codes
Assembly
567
star
2

ezuri

A Simple Linux ELF Runtime Crypter
Go
206
star
3

n26

API and CLI to get information of your N26 account
Go
169
star
4

Fe2O3

Simple prepender virus written in Rust
Rust
108
star
5

go-liora

Probably the first binary (PE/ELF) infector ever created in GoLang.
Go
48
star
6

midrashim

PT_NOTE to PT_LOAD x64 ELF infector written in Assembly
Assembly
40
star
7

go-weather-indicator

Minimalistic GTK weather indicator written in GoLang.
Go
28
star
8

nim-cephei

Probably the first ELF binary infector ever created in Nim.
Nim
27
star
9

gocave

Finding code caves in ELF files with GoLang
Go
25
star
10

nasty

Reverse text segment x64 ELF infector written in Assembly
Assembly
15
star
11

msil-cecil-injection

Injection of MSIL using Cecil
C#
12
star
12

ansi-escape

Using ANSI escape codes with x64 Linux Assembly
Assembly
10
star
13

transferwise

A command line tool to get quotes from TransferWise
Go
8
star
14

3-tier-app-aws-terraform

Simple 3-tier app example delpoyed to AWS using Terraform
HCL
6
star
15

vala-zariche

Linux.Zariche: a Vala virus
Vala
3
star
16

defjam

Assembly
2
star
17

dynamic-api-caller-dotnet

A class which can dynamically call a Windows API function at runtime using Reflection.Emit.
C#
2
star
18

bucket

A interactive shell to manage files in AWS S3.
Python
1
star
19

mbr-dumper

A .NET (C#) application that dumps the disk MBR onto a file.
C#
1
star
20

offsetter

Convert between file offsets and virtual addresses with Go
Go
1
star
21

nim-builder

Docker container to run and build Nim code
Shell
1
star
22

fasm-docker

Docker container to build FASM code
Dockerfile
1
star
23

rebar

A status line generator for Lemonbar, written in Rust.
Rust
1
star
24

Paper-Repo

Aggregated content from the vx-underground paper collection. Files may not be named correctly.
C
1
star
25

python-file-crypter

Encrypt any file using Python (RC4)
Python
1
star