NTMem 1.14.0

Python Memory (this is just a fork of PyMem) but we use NTDLL Functions!

NTMem

A python library to manipulate Windows processes (32 and 64 bits).
With pymem you can hack into windows process and manipulate memory (read / write).

Documentation

Its the same thing as pymem except instead of pymem.Pymem its ntmem.Open.

Listing process modules

import ntmem

pm = ntmem.Open('python.exe')
modules = list(pm.list_modules())
for module in modules:
    print(module.name)

Injecting a python interpreter into any process

from ntmem import Open as NTMem

notepad = subprocess.Popen(['notepad.exe'])

pm = NTMem('notepad.exe')
pm.inject_python_interpreter()
filepath = os.path.join(os.path.abspath('.'), 'pymem_injection.txt')
filepath = filepath.replace("\\", "\\\\")
shellcode = """
f = open("{}", "w+")
f.write("pymem_injection")
f.close()
""".format(filepath)
pm.inject_python_shellcode(shellcode)
notepad.kill()