Process Cloning
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
_xeroxz 78ec8745ad
swapping dirbase and peb in clone process E/KPROC
4 years ago
img init commit 4 years ago
pclone swapping dirbase and peb in clone process E/KPROC 4 years ago
README.md swapping dirbase and peb in clone process E/KPROC 4 years ago
pclone.sln init commit 4 years ago

README.md

pclone (Process Cloning)

pclone is small project designed to clone running processes. The cloning does not clone threads nor handles, it does however clone all virtual memory. It does this by swapping dirbase in the clones EPROCESS structure. It also swaps the PEB in the EPROCESS structure so the clone will list the same loaded modules as the cloned process.