项目作者: ohadozer

项目描述 :
a tool for analyzing WIN32 process allocated memory and find ASCII -or- UNICODE strings
高级语言: C#
项目地址: git://github.com/ohadozer/ProcessStringAnalyzer.git
创建时间: 2019-01-24T10:30:55Z
项目社区:https://github.com/ohadozer/ProcessStringAnalyzer

开源协议:

下载


Process String Analyzer

a tool for analyzing WIN32 process allocated memory and find ASCII -or- UNICODE strings

Main components:

  1. $ (1) simple server -
  2. uses .NET 4.0 (Client profile)
  3. $ (2) simple client -
  4. uses C/C++ 11/14 console application (toolset v141, vs2017)

Usage:

  1. $ (1) start server (i.e. SimpleServer IP Port)
  2. $ (2) run client (i.e. SimpleClient ServerIP ServerPort)

Notes:

  • currently memory analyzer just simpley analyzes explorer.exe (just as a demo) which is a hard-coded pick.
  • feel free to modify and extend it to make it generic