Nice link #IMHO
All issues of #popular #mechanics #magazin online in #google books
https://books.google.ca/books/about/Popular_Mechanics.html?id=49gDAAAAMBAJ&redir_esc=y
Nice link #IMHO
All issues of #popular #mechanics #magazin online in #google books
https://books.google.ca/books/about/Popular_Mechanics.html?id=49gDAAAAMBAJ&redir_esc=y
This is pretty freaking cool. #IMHO
Dump and disassemble a running memory region WITH NO DEBUGGER NEEDED. So no gdb or lldb will be detected.
You must own the process or be root.
dd if=/proc/11223/mem bs=1 skip=$((16#7f9ba80f3000)) count=128 2>/dev/null \
| objdump -D -b binary -m i386:x86-64 -M intel /dev/stdin
The 16# is a bashism to interpret as hex.