lcamtuf-memfetch

Process Image Dumper

A utility to dump all memory of a running process on demand

Memfetch is a simple utility to dump all memory of a running process, either immediately or when a fault condition is discovered. It is an attractive alternative to the vastly inferior search capabilities of many debuggers and tracers - and a convenient way to grab "screenshots" from many types of text-based interactive utilities.

GitHub

40 stars
5 watching
14 forks
Language: C
last commit: almost 7 years ago
Linked from 1 awesome list


Backlinks from these awesome lists:

Related projects:

Repository Description Stars
mobileforensicsresearch/mem Tool to dump memory from Android devices 66
marcosd4h/memhunter Automated endpoint sensor tool to detect memory-resident malware without requiring memory dumps 375
theupbeat/lfetch A C program that fetches and displays Linux system information 4
rek7/mxtract Analyzes and dumps memory to extract sensitive information from running processes 582
espressocake/ppldump_bof A tool for dumping the memory contents of a protected process on Windows 135
rachelambda/mfetch A lightweight shell script for fetching system information 29
trainr3kt/memreader_bof A tool that searches and extracts specific strings from another process's memory 41
kost/memdump A tool to extract and display the contents of a system's physical memory 12
evild3ad/memprocfs-analyzer Automated forensic analysis tool for Windows memory dumps 540
microsoft/clrmd A library for introspecting processes and dumps. 1,054
xforcered/credbandit A proof-of-concept tool for dumping the memory of a process and sending it back through a custom communication channel. 232
mehrankmlf/easycrypto An iOS app demonstrating Clean Architecture and MVVM with SwiftUI and Combine framework 79
myriadbits/mxfinspect Tool to visually inspect and analyze the internal structure of MXF files 39
rmccorm4/pokefetch A command-line tool that scrapes Pokémon information and displays it in a formatted output. 48
yardenshafir/mitigationflagsclitool Prints mitigation policy information for processes in a memory dump file. 44