NTMem
A python library to manipulate Windows processes (32 and 64 bits).
With pymem you can hack into windows process and manipulate memory (read / write).
Documentation
Its the same thing as pymem except instead of pymem.Pymem its ntmem.Open.
Listing process modules
import ntmem
pm = ntmem.Open('python.exe')
modules = list(pm.list_modules())
for module in modules:
print(module.name)
Injecting a python interpreter into any process
from ntmem import Open as NTMem
notepad = subprocess.Popen(['notepad.exe'])
pm = NTMem('notepad.exe')
pm.inject_python_interpreter()
filepath = os.path.join(os.path.abspath('.'), 'pymem_injection.txt')
filepath = filepath.replace("\\", "\\\\")
shellcode = """
f = open("{}", "w+")
f.write("pymem_injection")
f.close()
""".format(filepath)
pm.inject_python_shellcode(shellcode)
notepad.kill()
1 maintainer
Release files for NTMem 1.14.0
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | |
|---|---|---|---|
| ntmem-1.14.0.tar.gz | 24.6 kB | Details |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| ntmem-1.14.0-py3-none-any.whl | Python 3 | none | any | Details |
Total release size:54.9 kB
Release files / ntmem-1.14.0.tar.gz
| Download URL | ntmem-1.14.0.tar.gz |
|---|---|
| Size | 24.6 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
7636b85669d37944d218588a5f1321394c81033a5d3d8185dc3cc893ff0512e9
|
|
BLAKE2b-256 checksum How to use checksums |
2f0d0a49f6853ea39be418ebb3e97898fa4a5857396bb52021af13f5c40184fb
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
poetry/2.4.1 CPython/3.14.2 Windows/11
|
Release files / ntmem-1.14.0-py3-none-any.whl
| Download URL | ntmem-1.14.0-py3-none-any.whl |
|---|---|
| Size | 30.2 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
9a1c3b48bfc7f63ad7bfbdbb53e84b842906a67df81d586d0e290d0ddcb18bef
|
|
BLAKE2b-256 checksum How to use checksums |
65ad7d7470ee3e2affca5cfbe009faaa11bf563ffb8121fd442ca58cc4e57efc
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
poetry/2.4.1 CPython/3.14.2 Windows/11
|
