memsteal

Read the memory of a given (Linux) process starting at an offset.

Usage

❯ cd path/to/memsteal
❯ cargo install --path .

# Dump 1024 bytes of the address space for pid 20747 starting at address 0xfffffe4fba50
❯ sudo memsteal 20747 0xfffffe4fba50
54 7A 4F FE FF FF 00 00 E7 03 00 00 00 00 00 00 01 00 00 00 00 00 00 00  TzO.....................
E8 03 00 00 00 00 00 00 50 BA 4F FE FF FF 00 00 40 06 04 C8 AA AA 00 00  ........P.O.....@.......
03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ........................
A8 BA 4F FE FF FF 00 00 02 00 00 00 00 00 00 00 70 BA 4F FE FF FF 00 00  ..O.............p.O.....
94 69 FF C7 AA AA 00 00 CC BA 4F FE FF FF 00 00 E8 48 02 C8 AA AA 00 00  .i........O......H......
00 D0 CF FD 0B 51 00 00 20 BD 4F FE FF FF 00 00 00 6B FF C7 AA AA 00 00  .....Q....O......k......
10 0B A5 05 AB AA 00 00 74 6B FF C7 AA AA 00 00 34 68 FF C7 AA AA 00 00  ........tk......4h......
48 30 04 C8 AA AA 00 00 10 0B A5 05 AB AA 00 00 74 6B FF C7 AA AA 00 00  H0..............tk......
05 00 00 00 00 00 00 00 00 10 00 00 00 00 00 00 90 6A FF C7 AA AA 00 00  .................j......
00 C0 4D FE FF FF 00 00 80 52 00 C8 AA AA 00 00 D8 BC 4F FE FF FF 00 00  ..M......R........O.....
8C 52 00 C8 AA AA 00 00 D8 BC 4F FE FF FF 00 00 00 00 00 00 00 00 00 00  .R........O.............
00 00 00 00 00 00 00 00 10 0B A5 05 AB AA 00 00 05 00 00 00 00 00 00 00  ........................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ........................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ........................
01 00 00 00 00 00 00 00 00 C0 CF FD FF FF 00 00 00 D0 CF FD FF FF 00 00  ........................
00 C0 4F FE FF FF 00 00 00 F0 7F 00 00 00 00 00 40 0A A5 05 AB AA 00 00  ..O.............@.......
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 85 CF 63 09 00 00 00 00  ..................c.....
A0 B5 E2 83 FF FF 00 00 00 BA 4F FE FF FF 00 00 CC 44 D7 83 FF FF 00 00  ..........O......D......
01 00 00 00 00 00 00 00 18 70 E6 83 FF FF 00 00 00 00 80 02 00 00 00 00  .........p..............
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 00 00 08 00 00 00 00  ........................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ........................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ........................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 D0 CF FD FF FF 00 00  ........................
00 00 00 00 00 00 00 00 20 BD 4F FE FF FF 00 00 E4 25 E4 83 FF FF 00 00  ..........O......%......
5C 6A FF C7 AA AA 00 00 A8 BE 4F FE FF FF 00 00 F0 6C FF C7 AA AA 00 00  \j........O......l......
F0 05 04 C8 AA AA 00 00 01 00 00 00 00 00 00 00 98 BE 4F FE FF FF 00 00  ..................O.....
38 BE 4F FE FF FF 00 00 01 00 00 00 00 00 00 00 00 B0 E2 83 FF FF 00 00  8.O.....................
74 6B FF C7 AA AA 00 00 74 6B FF C7 AA AA 00 00 01 00 00 00 00 00 00 00  tk......tk..............
98 BE 4F FE FF FF 00 00 04 C8 4F FE FF FF 00 00 18 6D FF C7 AA AA 00 00  ..O.......O......m......
40 7B C6 83 FF FF 00 00 80 7B C6 83 FF FF 00 00 00 00 00 00 00 00 00 00  @{.......{..............
30 BE 4F FE FF FF 00 00 60 7C C6 83 FF FF 00 00 A0 BD 4F FE FF FF 00 00  0.O.....`|........O.....
F0 6C FF C7 AA AA 00 00 18 70 E6 83 01 00 00 00 98 BE 4F FE FF FF 00 00  .l.......p........O.....
98 BE 4F FE FF FF 00 00 01 00 00 00 00 00 00 00 F0 05 04 C8 AA AA 00 00  ..O.....................
F0 6C FF C7 AA AA 00 00 A8 BE 4F FE FF FF 00 00 50 6A E6 83 FF FF 00 00  .l........O.....Pj......
00 00 00 00 00 00 00 00 18 70 E6 83 FF FF 00 00 F0 05 04 C8 AA AA 00 00  .........p..............
00 00 00 00 00 00 00 00 20 BD 4F FE FF FF 00 00 92 2C 1C 65 40 5F 6E 38  ..........O......,.e@_n8
00 00 00 00 00 00 00 00 F2 EA 95 18 40 5F 6E 38 00 00 00 00 00 00 00 00  ............@_n8........
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ........................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ........................
00 00 00 00 00 00 00 00 00 00 00 00 FF FF 00 00 00 00 00 00 00 00 00 00  ........................
00 00 00 00 00 00 00 00 50 6A E6 83 FF FF 00 00 E0 7C C6 83 FF FF 00 00  ........Pj.......|......
00 55 8B 7D 21 EF CD 8D 00 00 00 00 00 00 00 00 F0 63 FF C7 AA AA 00 00  .U.}.............c......