SwiPE - System Wide Injection PE (Portable Executable)
- SwiPE is a pure 64-bit DLL Un/Injection package written in Delphi XE2. It allows DLL Un/Injection into 32-bit processes (running under the WOW64 emulator) as well as native 64-bit processes and also exposes other useful system process and thread-related APIs to make your programming life that much easier
- SwiPE has been extensively tested on Windows XP x64 - Windows 7 x64 so any official 64-bit Microsoft Windows OS is compatible to date, regardless of service packs or lack thereof
- SwiPE uses 100% usermode code in order to un/inject into already-running 32/64-bit processes however newly spawned processes are injected by a small c written kernel mode driver, this way you are guaranteed that your injected DLLs are loaded and initialized before the process runs its entry point routine. This is important because if you plan to use hooking code inside your DLLs you do not want to miss function calls that may take place right at the entry point or near there. You couldnїЅt have things ANY easier.
- There are no target process memory leaks for injection, all allocated DLL pathnames in the target processїЅ memory space are freed in a "synchronized" fashion. Any memory that is allocated is 99.9% guaranteed to be freed
- SwiPE does not hook any code or APIs in order to achieve injection or uninjection unlike some other packages on the market, those of which are also not x64-ready.
- SwiPE does NOT need any special framework such as .NET to run, it is written using strict Win64 APIs
- SwiPE does not use any "messy" remote thread creations which "start" at custom hand-written assembly code stubs, instead only APCs are used for module un/injection which are documented and used WIDELY throughout the entire Windows NT OS, primarily the kernel itself. APCs are a timeless and proven OS technology and I find them extremely reliable and extra stable as opposed to "other" DLL un/injection methods
- SwiPE handles the process and to-be-injected module bitness for you internally, it will not allow crosses between the two so you donїЅt have to worry about any of this, making your job much easier and less of a headache
- Swipe exposes both Ansi and Unicode API variants for un/injection which may be convenient for you such as: InjectModuleA/W, UnInjectModuleA/W, CreateProcessInjectA/W.
- IPC functionality has been included for "inter-process communication" amongst processes, bitdepth doesnїЅt matter here, a 64-bit process can communicate perfectly with a 32-bit process and vice versa. IPC channels or "sinks" can be created, passed data to and destroyed at will. The following APIs are available:CreateIpcSink, SendIpcData, DestroyIpcSink.
Product License: C
Source: On purchase/registration
File Status: Demo only
Compatible with: DXE64