• Stars
    star
    149
  • Rank 248,619 (Top 5 %)
  • Language
    Assembly
  • License
    MIT License
  • Created over 6 years ago
  • Updated about 3 years ago

Reviews

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Repository Details

Small tool to run ELF binaries from memory with a given process name

memrun

Small tool written in Golang to run ELF (x86_64) binaries from memory with a given process name. Works on Linux where kernel version is >= 3.17 (relies on the memfd_create syscall).

Usage

Build it with $ go build memrun.go and execute it. The first argument is the process name (string) you want to see in ps auxww output for example. Second argument is the path for the ELF binary you want to run from memory.

Usage: memrun process_name elf_binary

More Repositories

1

virii

Collection of ancient computer virus source codes
Assembly
599
star
2

ezuri

A Simple Linux ELF Runtime Crypter
Go
221
star
3

n26

API and CLI to get information of your N26 account
Go
178
star
4

Fe2O3

Simple prepender virus written in Rust
Rust
108
star
5

go-liora

Probably the first binary (PE/ELF) infector ever created in GoLang.
Go
48
star
6

midrashim

PT_NOTE to PT_LOAD x64 ELF infector written in Assembly
Assembly
41
star
7

nim-cephei

Probably the first ELF binary infector ever created in Nim.
Nim
28
star
8

go-weather-indicator

Minimalistic GTK weather indicator written in GoLang.
Go
28
star
9

gocave

Finding code caves in ELF files with GoLang
Go
25
star
10

nasty

Reverse text segment x64 ELF infector written in Assembly
Assembly
18
star
11

msil-cecil-injection

Injection of MSIL using Cecil
C#
12
star
12

ansi-escape

Using ANSI escape codes with x64 Linux Assembly
Assembly
10
star
13

transferwise

A command line tool to get quotes from TransferWise
Go
8
star
14

capable

Interact with Capacities.io API from your terminal
Go
7
star
15

3-tier-app-aws-terraform

Simple 3-tier app example delpoyed to AWS using Terraform
HCL
6
star
16

vala-zariche

Linux.Zariche: a Vala virus
Vala
3
star
17

dynamic-api-caller-dotnet

A class which can dynamically call a Windows API function at runtime using Reflection.Emit.
C#
2
star
18

defjam

Assembly
1
star
19

bucket

A interactive shell to manage files in AWS S3.
Python
1
star
20

mbr-dumper

A .NET (C#) application that dumps the disk MBR onto a file.
C#
1
star
21

offsetter

Convert between file offsets and virtual addresses with Go
Go
1
star
22

nim-builder

Docker container to run and build Nim code
Shell
1
star
23

fasm-docker

Docker container to build FASM code
Dockerfile
1
star
24

rebar

A status line generator for Lemonbar, written in Rust.
Rust
1
star
25

Paper-Repo

Aggregated content from the vx-underground paper collection. Files may not be named correctly.
C
1
star
26

python-file-crypter

Encrypt any file using Python (RC4)
Python
1
star