search

trolldbois / python-haystack

Process heap analysis framework - Windows/Linux - record type inference and forensics
http://trolldbois.blogspot.com/search?q=python-haystack
GNU General Public License v3.0
94 stars 33 forks source link

Make frida-re PoC #10

Open trolldbois opened 9 years ago

trolldbois commented 9 years ago

http://www.frida.re/docs/usage/

trolldbois commented 8 years ago

haystack could use Frida to monitor specific memory changes (read || Write) in a specific memory allocation. a sort of haystack-show/watch, but based on an actual event loop, not a time base iteration.

trolldbois commented 7 years ago

https://github.com/nowsecure/frida-memory-stream

trolldbois commented 7 years ago

https://www.frida.re/docs/usage/ even more straightforward