commit 2b2f996eb94e644d083a2f0928238407b9dda882 · victor.earth/memmut

LICENSE.md

···

       1
       1
       +
       Copyright 2025 Victor Bjelkholm

     

       2
       2
       +
       

     

       3
       3
       +
       Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the “Software”), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:

     

       4
       4
       +
       

     

       5
       5
       +
       The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.

     

       6
       6
       +
       

     

       7
       7
       +
       THE SOFTWARE IS PROVIDED “AS IS”, WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

+130

README.md

···

       1
       1
       +
       # Memmut

     

       2
       2
       +
       > scanmem alternative with concurrent memory scanning

     

       3
       3
       +
       

     

       4
       4
       +
       A little CLI utility that helps you find memory addresses, and write values into that address.

     

       5
       5
       +
       

     

       6
       6
       +
       ## How to use

     

       7
       7
       +
       

     

       8
       8
       +
       First start the program whose address you wanna muck about with, an example program exists in the source which can be started like this:

     

       9
       9
       +
       

     

       10
       10
       +
       ```

     

       11
       11
       +
       $ cargo run --example=simple

     

       12
       12
       +
       Memory Scanner Target - Press ENTER for new values, Ctrl+C to quit

     

       13
       13
       +
       Current values:

     

       14
       14
       +
       Index 0: 5

     

       15
       15
       +
       Index 1: 7

     

       16
       16
       +
       Index 2: 6

     

       17
       17
       +
       Index 3: 4

     

       18
       18
       +
       Index 4: 1

     

       19
       19
       +
       Index 5: 9

     

       20
       20
       +
       Index 6: 2

     

       21
       21
       +
       Index 7: 3

     

       22
       22
       +
       Index 8: 7

     

       23
       23
       +
       Index 9: 9

     

       24
       24
       +
       

     

       25
       25
       +
       Press ENTER to generate new values...

     

       26
       26
       +
       ```

     

       27
       27
       +
       

     

       28
       28
       +
       Everytime you hit enter, the values will change. Each belonging to a memory address. 

     

       29
       29
       +
       

     

       30
       30
       +
       Then to run the actual scanner:

     

       31
       31
       +
       

     

       32
       32
       +
       ```

     

       33
       33
       +
       $ cargo build && sudo ./target/release/memmut "target/debug/examples/simple"

     

       34
       34
       +
           Finished `dev` profile [unoptimized + debuginfo] target(s) in 0.03s

     

       35
       35
       +
       [sudo] password for user:

     

       36
       36
       +
       # Scanning for process "target/debug/examples/simple" like how pgrep -f works

     

       37
       37
       +
       Process found with PID: 833569

     

       38
       38
       +
       Successfully attached to process. Found 34 readable memory regions.

     

       39
       39
       +
       Please enter current value, or "help" for other commands.

     

       40
       40
       +
       >

     

       41
       41
       +
       ```

     

       42
       42
       +
       

     

       43
       43
       +
       This is run with `sudo` because reading/writing to arbitrary memory addresses obviously require `root` privileges. The passed argument to the program is the target name of the process we want to attach to. Once found, it'll drop you into a REPL.

     

       44
       44
       +
       

     

       45
       45
       +
       Basic idea is that you write what the number currently is, and everytime it changes to something new, which eventually narrows down the list of addresses to (ideally) 1. Once you know the specific address, you can use `set $index $new-value` to write whatever value you want to that address.

     

       46
       46
       +
       

     

       47
       47
       +
       ```

     

       48
       48
       +
       Successfully attached to process. Found 34 readable memory regions.

     

       49
       49
       +
       Please enter current value, or "help" for other commands.

     

       50
       50
       +
       > 8

     

       51
       51
       +
       01/034 searching 59ac4bb56000 - 59ac4bb79000...

     

       52
       52
       +
       02/034 searching 59ac4bb79000 - 59ac4bc0a000...

     

       53
       53
       +
       03/034 searching 59ac4bc0a000 - 59ac4bc10000...

     

       54
       54
       +
       26/034 searching 77c95d401000 - 77c95d403000...

     

       55
       55
       +
       22/034 searching 77c95d3f9000 - 77c95d3fa000...

     

       56
       56
       +
       09/034 searching 77c95d187000 - 77c95d1ab000...

     

       57
       57
       +
       04/034 searching 59ac4bc10000 - 59ac4bc11000...

     

       58
       58
       +
       30/034 searching 77c95d42f000 - 77c95d43a000...

     

       59
       59
       +
       ........ok

     

       60
       60
       +
       29/034 searching 77c95d406000 - 77c95d42f000...

     

       61
       61
       +
       20/034 searching 77c95d3f6000 - 77c95d3f8000...

     

       62
       62
       +
       ........ok

     

       63
       63
       +
       12/034 searching 77c95d36b000 - 77c95d36f000...

     

       64
       64
       +
       ........ok

     

       65
       65
       +
       21/034 searching 77c95d3f8000 - 77c95d3f9000...

     

       66
       66
       +
       ........ok

     

       67
       67
       +
       ........ok

     

       68
       68
       +
       06/034 searching 77c958000000 - 77c958021000...

     

       69
       69
       +
       13/034 searching 77c95d36f000 - 77c95d371000...

     

       70
       70
       +
       15/034 searching 77c95d379000 - 77c95d37d000...

     

       71
       71
       +
       ........ok

     

       72
       72
       +
       ........ok

     

       73
       73
       +
       16/034 searching 77c95d37d000 - 77c95d3a1000...

     

       74
       74
       +
       ........ok

     

       75
       75
       +
       17/034 searching 77c95d3a1000 - 77c95d3a5000...

     

       76
       76
       +
       10/034 searching 77c95d1ab000 - 77c95d31c000...

     

       77
       77
       +
       ........ok

     

       78
       78
       +
       27/034 searching 77c95d403000 - 77c95d405000...

     

       79
       79
       +
       07/034 searching 77c95cf84000 - 77c95d184000...

     

       80
       80
       +
       ........ok

     

       81
       81
       +
       08/034 searching 77c95d184000 - 77c95d187000...

     

       82
       82
       +
       18/034 searching 77c95d3a5000 - 77c95d3a6000...

     

       83
       83
       +
       ........ok

     

       84
       84
       +
       19/034 searching 77c95d3a6000 - 77c95d3a7000...

     

       85
       85
       +
       24/034 searching 77c95d3fd000 - 77c95d3ff000...

     

       86
       86
       +
       25/034 searching 77c95d3ff000 - 77c95d401000...

     

       87
       87
       +
       ........ok

     

       88
       88
       +
       ........ok

     

       89
       89
       +
       ........ok

     

       90
       90
       +
       31/034 searching 77c95d43a000 - 77c95d43c000...

     

       91
       91
       +
       32/034 searching 77c95d43c000 - 77c95d43d000...

     

       92
       92
       +
       ........ok

     

       93
       93
       +
       28/034 searching 77c95d405000 - 77c95d406000...

     

       94
       94
       +
       33/034 searching 77c95d43d000 - 77c95d43e000...

     

       95
       95
       +
       34/034 searching 7fff41040000 - 7fff41062000...

     

       96
       96
       +
       11/034 searching 77c95d31c000 - 77c95d36b000...

     

       97
       97
       +
       ........ok

     

       98
       98
       +
       05/034 searching 59ac69d8f000 - 59ac69db0000...

     

       99
       99
       +
       23/034 searching 77c95d3fb000 - 77c95d3fd000...

     

       100
       100
       +
       ........ok

     

       101
       101
       +
       ........ok

     

       102
       102
       +
       ........ok

     

       103
       103
       +
       14/034 searching 77c95d371000 - 77c95d379000...

     

       104
       104
       +
       ........ok

     

       105
       105
       +
       ........ok

     

       106
       106
       +
       ........ok

     

       107
       107
       +
       ........ok

     

       108
       108
       +
       ........ok

     

       109
       109
       +
       ........ok

     

       110
       110
       +
       ........ok

     

       111
       111
       +
       ........ok

     

       112
       112
       +
       ........ok

     

       113
       113
       +
       ........ok

     

       114
       114
       +
       ........ok

     

       115
       115
       +
       ........ok

     

       116
       116
       +
       ........ok

     

       117
       117
       +
       ........ok

     

       118
       118
       +
       ........ok

     

       119
       119
       +
       2393> 1

     

       120
       120
       +
       ..........ok

     

       121
       121
       +
       13> 1

     

       122
       122
       +
       ..........ok

     

       123
       123
       +
       2> 9

     

       124
       124
       +
       ..........ok

     

       125
       125
       +
       2> 5

     

       126
       126
       +
       ..........ok

     

       127
       127
       +
       1> set 0 1000

     

       128
       128
       +
       ```

     

       129
       129
       +
       

     

       130
       130
       +
       Once the `set` command is run, the other process should now have been reading the new value.