Skip to content

angusshire/memscan

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

29 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

memscan

memscan is a command line utility for scanning a user-mode process's memory. It is compatible with 64-bit Windows, and will not work on 32-bit Windows. For speed, the scan does not support non-aligned addresses.

Usage

Start a memory scan for a process with

memscan <processName>

That will start a memory scan for the process with default settings.

If you want to specify a value to scan for, enter

memscan <processName> -v <value>

You can also specify the combination of memory units you want to scan for (e.g., bytes, words (16-bits), dwords (32-bits), and quadwords (64-bits)). The flags -b, -w, -d, and -q correspond to memory unit byte, word, dword, and quadword respectively. Simply combine the flags and add them to the end of the command line statement to scan for these memory units. E.g.,

memscan <processName> -dq

Would scan the process for dwords and quadwords.

License

memscan is distributed under the GNU General Public License v3.0 (GPLv3).

About

🔍 CLI utility for scanning user-mode process memory.

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages