Skip to content

a tool for analyzing WIN32 process allocated memory and find ASCII -or- UNICODE strings

Notifications You must be signed in to change notification settings

ohadozer/ProcessStringAnalyzer

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

9 Commits
 
 
 
 
 
 
 
 

Repository files navigation

Process String Analyzer

a tool for analyzing WIN32 process allocated memory and find ASCII -or- UNICODE strings

Main components:

$ (1) simple server -
    uses .NET 4.0 (Client profile)
$ (2) simple client - 
    uses C/C++ 11/14 console application (toolset v141, vs2017)

Usage:

$ (1) start server (i.e. SimpleServer IP Port)
$ (2) run client (i.e. SimpleClient ServerIP ServerPort)

Notes:

  • currently memory analyzer just simpley analyzes explorer.exe (just as a demo) which is a hard-coded pick.
  • feel free to modify and extend it to make it generic

About

a tool for analyzing WIN32 process allocated memory and find ASCII -or- UNICODE strings

Topics

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published