From Collaborative RCE Tool Library
mdmp
| Tool name: | mdmp |
|
||
|---|---|---|---|---|
| Author: | Vlad-Ioan Topan | |||
| Website: | http://code.google.com/p/mdmp/ | |||
| Current version: | 0.2.2 | |||
| Last updated: | October 28, 2010 | |||
| Direct D/L link: | http://code.google.com/p/mdmp/downloads/detail?name=mdmp-0.2.4-beta-binaries.zip | |||
| License type: | GPL | |||
| Description: | mdmp - open-source x86 memory/process (command-line) dumper with Python bindings libmdmp is a C library designed to dump process memory on Windows. mdmp.exe is a command-line tool exposing most functionality in libmdmp (process/stack/heap/random-mem-address dumping). pymdmp.pyd is a Python wrapper (only built for 2.7 as of now, trivial to adapt to any 2.x) exposing the memory-dumping functionality in Python. Example usage: mdmp: mdmp.exe /n:explo /e:kernel - will dump all modules (DLLs) whose name contains "kernel" from all the processes whose name contains "explo" pymdmp: import pymdmp lst = pymdmp.dump(pymdmp.SEL_BY_NAME, pymdmp.DUMP_IMAGE_BY_NAME, 0, processName="explo", moduleName="kernel") - will return in lst a list of tuples (<process_name>, <PID>, <dump-start-address>, <dump-data>) Delphi bindings are planned. Feedback is welcome @ vtopan/gmail. Requires the VC 2005 runtime. |
|||
| Related URLs: |
|
|||
Feed containing all updates for this tool.
(please also edit it if you think it fits well in some additional category, since this can also be controlled)
You are welcome to add your own useful notes about this tool, for others to see!