首页
社区
课程
招聘
[转帖]mdmp 0.2.2 by Vlad-Ioan Topan
发表于: 2010-10-31 10:11 2796

[转帖]mdmp 0.2.2 by Vlad-Ioan Topan

2010-10-31 10:11
2796
mdmp  0.2.2 by Vlad-Ioan Topan   

mdmp - open-source x86 memory/process (command-line) dumper with Python bindings

libmdmp is a C library designed to dump process memory on Windows.

mdmp.exe is a command-line tool exposing most functionality in libmdmp (process/stack/heap/random-mem-address dumping).

pymdmp.pyd is a Python wrapper (only built for 2.7 as of now, trivial to adapt to any 2.x) exposing the memory-dumping functionality in Python.

Example usage:

mdmp:
mdmp.exe /n:explo /e:kernel
- will dump all modules (DLLs) whose name contains "kernel" from all the processes whose name contains "explo"

pymdmp:
import pymdmp
lst = pymdmp.dump(pymdmp.SEL_BY_NAME, pymdmp.DUMP_IMAGE_BY_NAME, 0, processName="explo", moduleName="kernel")
- will return in lst a list of tuples (<process_name>, <PID>, <dump-start-address>, <dump-data>)

Delphi bindings are planned. Feedback is welcome @ vtopan/gmail.


348K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8X3y4G2k6r3g2Q4x3X3g2Y4L8$3!0Y4L8r3g2Q4x3X3g2U0L8$3#2Q4x3V1k6H3i4K6u0r3L8h3c8E0M7q4)9J5c8X3c8G2N6$3&6D9L8$3q4V1M7#2)9J5c8X3c8W2N6r3q4A6L8q4)9K6c8X3&6S2L8h3g2Q4x3@1c8E0k6r3#2H3i4K6u0V1x3q4)9J5k6e0u0Q4x3X3f1I4i4K6u0V1j5h3I4H3K9r3q4Q4x3X3c8T1K9h3&6S2M7X3W2W2M7#2)9J5k6i4A6A6M7l9`.`.


Программное обеспечение выпуска и Windows Crack Обучение
Нам-Dabei Guanyin Бодхисаттва Нам без митабха

[培训]科锐逆向工程师培训第53期2025年7月8日开班!

收藏
免费 1
支持
分享
最新回复 (1)
雪    币: 370
活跃值: (15)
能力值: ( LV9,RANK:170 )
在线值:
发帖
回帖
粉丝
2
可惜不能用在py3x
2010-10-31 11:53
0
游客
登录 | 注册 方可回帖
返回