Skip to content
/ mem Public

convenient wrapper around pyMach using structs. grown out of repl-based exploration and editing of other processes memory (macOS only, mach refers to its kernel)

Notifications You must be signed in to change notification settings

jrsa/mem

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

2 Commits
 
 
 
 

Repository files navigation

mem

convenient wrapper around pyMach using structs. grown out of repl-based exploration and editing of other processes memory. requires pymach and execution as superuser

from memory import Memory
import sys

 # any process id
pid = int(sys.argv[1])
m = Memory(pid)

# read an unsigned integer from any valid address in the foriegn process
address = 0xDEADBEEF
value = m.read('I', address)

# apply hax
value = value + 1

# write the modified value back
m.write('I', address, value)

About

convenient wrapper around pyMach using structs. grown out of repl-based exploration and editing of other processes memory (macOS only, mach refers to its kernel)

Topics

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages