Class Rex::Post::Meterpreter::Extensions::Stdapi::Sys::ProcessSubsystem::Image
In: lib/rex/post/meterpreter/extensions/stdapi/sys/process_subsystem/image.rb
Parent: Object

Interacts with loading, unloading, enumerating, and querying image files in the context of a given process.

Methods

[]   each_image   get_images   get_procedure_address   load   new   unload  

Public Class methods

new(process)

Initializes the image instance.

Public Instance methods

[](key)

Returns the image base address associated with the supplied image name.

each_image(&block)

Enumerates through each image in the process.

get_images()

Returns an array of images in the process with hash objects that have keys for ‘name’, ‘path’, and ‘base’.

get_procedure_address(image_file, procedure)

Returns the address of the procedure that is found in the supplied library.

load(image_path)

Loads an image file into the context of the process.

unload(base)

Unloads an image file that is loaded into the address space of the process by its base address.

[Validate]