Get injected code looks for injected threads and injected memory regions in user space processes. Written 2 years ago so don't judge :) Python version of Get-InjectedThread.ps1.

Support python 3.6 and above.

python get-injected_code.py

Outputs one json file injected_code.json with the injected threads and suspicious memory regions information.

• @jaredcatkinson - Get-InjectedThread.ps1
• @Mario_Vilas - part of winappdbg code was converted to python 3 and used for winapi calls.