首页| JavaScript| HTML/CSS| Matlab| PHP| Python| Java| C/C++/VC++| C#| ASP| 其他|
购买积分 购买会员 激活码充值

您现在的位置是:虫虫源码 > Python > 生活的内存取证在Linux(/ dev /(K)内存,内存转储)

生活的内存取证在Linux(/ dev /(K)内存,内存转储)

  • 资源大小:7.44 MB
  • 上传时间:2021-06-30
  • 下载次数:0次
  • 浏览次数:1次
  • 资源积分:1积分
  • 标      签: 取证 内存 生活 LinuxdevK 转储

资 源 简 介

By using /dev/(k)mem or a memory dump, Draugr can be used to access easily in python to this memory, play (read, write, disassemble, search) with it ... and can find system information (processes ...) by different methods. It can find kernel symbols (pattern matching in a XML file or with EXPORT_SYMBOL), processes (informations and sections) (by the kernel linked list or bruteforce) and disassemble/dump the memory.

相 关 资 源

您 可 能 感 兴 趣 的

同 类 别 推 荐

VIP VIP