Skip to content

felipeczpaz/NtWriteVirtualMemory-Dumper

View on GitHub ↗Related repositories →

A C++ DLL that hooks `NtWriteVirtualMemory` using trampoline technique to capture the `Buffer` parameter and save it to a unique `.bin` file on the desktop every time the function is called. This tool can be used for debugging or forensic purposes to monitor memory write operations and capture data being written to a process's virtual memory space.

active 2024-07-162025-02-26 (UTC)

Complete coverage27,251 / 27,254 hourly files (100%) · 2 absent upstream2023-08-152026-09-23 (UTC)
Events
8
Pushes
5
Pull requests
0
Issues
0
Stars
0
Forks
0

Activity over time

Daily event counts in the loaded window

Line chart, 226 days from 2024-07-16 to 2025-02-26. Pushes: 5 total, peak 3 in a day. Pull requests: 0 total, peak 0 in a day. Issues: 0 total, peak 0 in a day. Comments: 0 total, peak 0 in a day. Stars: 0 total, peak 0 in a day.

  • Pushes
  • Pull requests
  • Issues
  • Comments
  • Stars

Top contributors

Pushes, PRs, issues, reviews and comments — stars and forks excluded, so this is contribution rather than popularity

ContributorContributionsPushesPRsComments
felipeczpaz5500

Recent activity

Latest issues, pull requests and releases

No issue or PR events — this repo's activity is pushes only.

Totals cover only the window loaded into ClickHouse and count events, not GitHub's lifetime totals — 0 stars here means stars gained during the window, not the repo's star count.