D4stiny / ForkPlayground

An implementation and proof-of-concept of Process Forking.
GNU General Public License v3.0
218 stars 33 forks source link

ForkPlayground

A library to implement the Process Forking attack described in this blog post.

ForkLib - C++ library that implements the Process Forking attack.

ForkDump - Proof-of-Concept application to create a memory dump of an arbitrary process using the ForkLib.

Usage

ForkDump.exe [dump file name] [target process ID]

dump file name - The name of the file to write the dump of the process to.

target process ID - The process ID of the process whose memory the tool should dump.

Download

ForkDump x64

ForkDump x86