Pmcma is a tool aimed at automating the most time consuming taskes of exploitation. It for instance determine why an application is triggering a segmentention fault, evaluate if the faulting instruction can be used to write to memory or execute arbitrary code, and list all the function pointers potentially called from a given point in time by an application.
Pmcma is a totally new kind of debugger, which allows for easy experimentation with a process in memory by forcing it to fork. The exact replicas of the process created in memory can then be intrumented while keeping the properties (eg: state of variables, ASLR, permissions...) of the original process.
Pmcma is an easily extensible framework available under the Apache 2.0 license.
Read more at https://moabi.com/research/jbrossard/index.html#pmcma
License
Apache License V2.0
Define and Deliver Comprehensive Cybersecurity Services. Security threats continue to grow, and your clients are most likely at risk. Small- to medium-sized businesses (SMBs) are targeted by 64% of all cyberattacks, and 62% of them admit lacking in-house expertise to deal with security issues. Now technology solution providers (TSPs) are a prime target. Enter ConnectWise Cybersecurity Management (formerly ConnectWise Fortify) — the advanced cybersecurity solution you need to deliver the managed detection and response protection your clients require. Whether you’re talking to prospects or clients, we provide you with the right insights and data to support your cybersecurity conversation. From client-facing reports to technical guidance, we reduce the noise by guiding you through what’s really needed to demonstrate the value of enhanced strategy.
User Ratings
ease
1 of 5
2 of 5
3 of 5
4 of 5
5 of 5
5 / 5
features
1 of 5
2 of 5
3 of 5
4 of 5
5 of 5
5 / 5
design
1 of 5
2 of 5
3 of 5
4 of 5
5 of 5
5 / 5
support
1 of 5
2 of 5
3 of 5
4 of 5
5 of 5
5 / 5
-
Amazing debugger to find all the arbitrary execute primitives given an arbitrary write primitive :)
-
1 user found this review helpful.
-
Read more reviews >
Additional Project Details
Intended Audience
Security