This tool is used to get syscalls and memory dumps of executables.
m m "
# m" mmm mmm m mm
#m# #" "# # #" #
# #m # # # # #
# "m "#m#" mm#mm # #
Developed by Koinsec
Usage: koin [--dump-dir DIR] [--rwxdump-interval N] [--per-map-limit BYTES] --target <prog> [args...]
Example
m m "
# m" mmm mmm m mm
#m# #" "# # #" #
# #m # # # # #
# "m "#m#" mm#mm # #
Developed by Koinsec
{"event":"syscall_entry","ts_ns":1760436698656477827,"pid":55156,"syscall":59,"regs":{"orig_rax":"0x3b","rax":"0xffffffffffffffda","rdi":"0x7ffed8a6a6d0","rsi":"0x7ffed8a6b538","rdx":"0x7ffed8a6b550","r10":"0x0","r8":"0xfff","r9":"0x7e2e14521740"},"ptr_snippet":"kȦ��"}
{"event":"syscall_exit","ts_ns":1760436698656747397,"pid":55156,"syscall_ret":-2}
{"event":"syscall_entry","ts_ns":1760436698656857094,"pid":55156,"syscall":59,"regs":{"orig_rax":"0x3b","rax":"0xffffffffffffffda","rdi":"0x7ffed8a6a6d0","rsi":"0x7ffed8a6b538","rdx":"0x7ffed8a6b550","r10":"0x0","r8":"0xfff","r9":"0x7e2e14521740"},"ptr_snippet":"kȦ��"}
{"event":"syscall_exit","ts_ns":1760436698656913011,"pid":55156,"syscall_ret":-2}
{"event":"syscall_entry","ts_ns":1760436698656934904,"pid":55156,"syscall":59,"regs":{"orig_rax":"0x3b","rax":"0xffffffffffffffda","rdi":"0x7ffed8a6a6d0","rsi":"0x7ffed8a6b538","rdx":"0x7ffed8a6b550","r10":"0x0","r8":"0xfff","r9":"0x7e2e14521740"},"ptr_snippet":"kȦ��"}
{"event":"syscall_exit","ts_ns":1760436698656970398,"pid":55156,"syscall_ret":-2}
{"event":"syscall_entry","ts_ns":1760436698656991076,"pid":55156,"syscall":59,"regs":{"orig_rax":"0x3b","rax":"0xffffffffffffffda","rdi":"0x7ffed8a6a6d0","rsi":"0x7ffed8a6b538","rdx":"0x7ffed8a6b550","r10":"0x0","r8":"0xfff","r9":"0x7e2e14521740"},"ptr_snippet":"kȦ��"}
{"event":"syscall_exit","ts_ns":1760436698657512207,"pid":55156,"syscall_ret":0}
{"event":"syscall_entry","ts_ns":17604366 .......
Social media pages