Skip to content

Instantly share code, notes, and snippets.

What would you like to do?
#Simple script for VirtuaBox memory extraction
# Usage: <VM name>
VBoxManage debugvm $1 dumpvmcore --filename=$1.elf
size=0x$(objdump -h $1.elf|egrep -w "(Idx|load1)" | tr -s " " | cut -d " " -f 4)
off=0x$(echo "obase=16;ibase=16;`objdump -h $1.elf|egrep -w "(Idx|load1)" | tr -s " " | cut -d " " -f 7 | tr /a-z/ /A-Z/`" | bc)
head -c $(($size+$off)) $1.elf|tail -c +$(($off+1)) > $1.raw
rm $1.elf
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment