Search Results for "dump analysis"

Hollows Hunter is a command-line malware analysis tool based on the PE-sieve passive memory scanner. It scans running processes, or even the full system, to identify potentially malicious implants. The tool can recognize and dump suspicious artifacts such as replaced PEs, injected PEs, shellcode, hooks, and in-memory patches. Unlike PE-sieve’s more process-specific workflow, Hollows Hunter can select targets using broader criteria such as process IDs, process names, or creation time. ...

Zygisk-Il2CppDumper is an Android reverse engineering utility that adapts Il2CppDumper-style metadata extraction to a Zygisk runtime environment. It is designed for Unity games and applications that use IL2CPP, where static extraction may be difficult because metadata can be protected, encrypted, or obfuscated. The tool runs through a Magisk/Zygisk module and targets a specific package name during execution. Its main output is a dump.cs file that helps researchers inspect IL2CPP classes,...

...It can also produce a number of graphs for further analysis.

The makedumpfile project page moved to https://github.com/makedumpfile/makedumpfile. By using the makedumpfile command, it is possible to shorten the dumpfile of kdump.

The Compile Memory Analysis Tool (CMAT) is a self-contained memory analysis tool that analyzes a Windows O/S memory (either in a dump or via XenAccess in a Xen VM) and extracts information about the operating system and the running processes.

This project/document has been created to give more exposure of the advanced debugging and dump file analysis/concepts using WinDbg. The document contains the real world scenario of programming bugs/problems with the authors explanation.

A collection of tools that should help you to analyze java thread dumps. MOVED TO github: https://github.com/slotties/jtdutils

Packet analyzer to search for valid clear-text social security numbers.

Integrating the TCP analysis performed by the tool, TCPTrace, into the flow-based network monitoring tool, Softflowd, so Softflowd might produce greater detail about TCP flows e.g. RTT values. Developed as part of a University Final Year Project.

Netdude, the NETwork DUmp data Displayer and Editor, is a visual and programmatical framework for inspection, analysis, and manipulation of tcpdump trace files.

Interrogate is a proof-of-concept tool for identification of cryptographic keys in binary material. First and foremost for memory dump analysis and forensics usage. Able to identify AES, Serpent, Twofish and RSA keys as of version 0.0.3.

Cross-Crash is an enhancement to the existing Crash utility that analyzes the linux kernel core dumps by Linux Kernel Crash Dump (LKCD). It allows the analysis of core dumps on hosts that are not of the same architecture the dumps were originated from.

dvbsnoop - DVB analyzer / MPEG analyzer program to monitor, analyze, debug, dump or view dvb/mpeg/dsm-cc/mhp stream information (TS, PES, SECTION) (e.g. digital television) send via satellite, cable or terrestrial.

Small utility written in C allowing easy access to Apache mod_log_sql generated logs for the purpose of log analyzers such as webalizer. Takes any or none of parameters virtual host, month, and year to generate Common Log Format dump to STDOUT.