Program to view the contents of memory at a particular address

kushalkoolwal · 06-04-2008, 04:38 PM

Hello,

I have been looking for a simple tool like the debug in MS-DOS to see the contents of the memory at a particular location.

For example, I would like to see what are the contents at the memory location 0xe0000.

I found this page:
http://www.gnome.org/projects/memprof/

but there is not Debian package for it plus it is very old (last release was in 2006).

How can I do that?

blocoi · 06-04-2008, 05:03 PM

memprof doesn't read the value of a specific memory location. if this would be possible, your system would be very, very, VERY insecure.
you might want to try this tool (or at least parts of it) though: http://mcgrewsecurity.com/projects/msramdmp/
it's made for attacking encrypted harddrives, but it might help you too.

kushalkoolwal · 06-04-2008, 06:05 PM

Quote:

Originally Posted by tulcod

memprof doesn't read the value of a specific memory location. if this would be possible, your system would be very, very, VERY insecure.
you might want to try this tool (or at least parts of it) though: http://mcgrewsecurity.com/projects/msramdmp/
it's made for attacking encrypted harddrives, but it might help you too.

Interesting but perhaps does not work for my needs. I just downloaded the their ISO image and could not get the utility running.

Thanks for your effort.