FIY
----- Forwarded message from evil fingers <[email protected]> -----
Happy New Year 2009!!!
We are Happy to announce the release of PMDv1.4.
About:
Process Memory Dumper is a little application that allows you to dump the entire memory of the wanted Process. Note this is NOT a PE Dumper, PMD dumps the ENTIRE memory space of the process, so its main usage is devoted to Forensics and Credentials Disclosure Research..or everything limited to the fancy of the user.
Working:
PMD v. 1.1 is merely textual so it's necessary to spent some work to explain how it works. PMD v. 1.2 was the same in GUI. After executing PMD it builds a list of running processes with attached PID, after that the list is completed you have only to insert the PID and PMD will produce a file called DumpedProcess.dmp
ChangeLog:
*Enhanced Process Information:
FileDate
ProcessTimings
uMode Timing/Running Time
kMode Timing/Kernel Time
FunctionLister
Comments
InternalName
LegalCopyright
LegalTrademarks
OriginalFilename
PrivateBuild
ProductVersion
VersionString
SpecialBuild
*Process Modules Lister.
*Function Modules Lister
Link to the tool:
http://www.evilfingers.com/tools/ProcessMemoryDumper.php
Any reviews or questions, concerning the tool or anything else could be sent to Contact.Fingers @ gmail.com
Warm Regards,
- EF
FileDate
ProcessTimings
uMode Timing/Running Time
kMode Timing/Kernel Time
FunctionLister
Comments
InternalName
LegalCopyright
LegalTrademarks
OriginalFilename
PrivateBuild
ProductVersion
VersionString
SpecialBuild
Link to the tool:
_______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
