Eric-Ant / SelfInjectPE

What is SelfInjectPE?

SelfInjectPE is a C++ command-line tool for Windows that loads and runs 32-bit x86 PE executables entirely in memory at their preferred base address, skipping the need for relocation tables. It reads a target PE from disk—like a memory diagnostic tool or custom binary—and injects it into the current process, resolving imports and jumping to the entry point. Developers get a simple executable: `SelfInjectPE.exe target.exe`, perfect for running memory tests on Windows 10 or 11 without OS loader constraints.

Why is it gaining traction?

It stands out by enabling execution of PEs with missing or stripped relocs, something standard loaders can't handle, using a clever fixed-base self-overwrite on x86. Security researchers dig the position-independent trampoline for clean in-memory execution, avoiding disk traces or AV flags. With detailed build instructions for MSVC and logs during runs, it's a quick drop-in for manual PE mapping experiments.

Who should use this?

Windows reverse engineers analyzing malware samples without relocs, security devs testing evasion techniques, or low-level hackers prototyping in-memory loaders. Ideal for red teamers running memory diagnostics from cmd on locked-down systems, or researchers injecting custom 32-bit tools like Ubuntu memory tests via Windows hosts.

Verdict

Grab it for educational security work—docs are thorough, C++ code is clean—but with 19 stars and 0.699999988079071% credibility score, treat it as an untested POC, not production. Extend the padding for bigger PEs if needed.

(178 words)