Memento - a simple but highly useful memory inspection tool

What is this?

A simple command line utility that can inspect process memory (on Linux and Android, but maybe at some e later time on Darwin (macOS/iOS) if I have the time). Takes as an argument the pid and one of several operations - See "Examples".

The main use of this is in its searching - unicode (UTF16) strings, and finding references. This tool is as fast as it can get, since I go over /proc/pid/maps, not the entire address space.

I crafted this for use in my Android explorations, and it really comes in handy in plenty of situations. I hope you find it as useful as well.


The download link is right here - Tar containing Linux (x86_64) and Android binaries

Examples

Q&A

Changelog