Skip to content

Instantly share code, notes, and snippets.

View 1ndahous3's full-sized avatar
๐Ÿ‘Œ
nice

Roman 1ndahous3

๐Ÿ‘Œ
nice
View GitHub Profile
@1ndahous3
1ndahous3 / coredmp_extractor.py
Created October 14, 2025 09:18
python3 script to save ELF modules from Linux memory dumps (core dump)
import sys
import struct
from ctypes import *
# ELF Header Definitions
ELF_SIGNATURE = b'\x7fELF'
ELFCLASSNONE = 0
ELFCLASS32 = 1
ELFCLASS64 = 2
@1ndahous3
1ndahous3 / mdmp_extractor.py
Created February 25, 2025 09:45
python3 script to save PE modules from Windows memory dumps (MDMP)
import sys
import struct
MDMP_HEADER_SIZE = 4096
MDMP_SIGNATURE = b'MDMP'
MDMP_DIRECTORY_SIZE = 12
MDMP_STREAM_TYPE_MEMORY_LIST = 0x5
MDMP_STREAM_TYPE_MEMORY_64_LIST = 0x9