memorpy icon indicating copy to clipboard operation
memorpy copied to clipboard

How to get the base address value?

Open fsegouin opened this issue 7 years ago • 2 comments

Hi, I had success reading values from a process but I would also like to use pointers and need the base address of the process I'm attached to. Is there a way to get that info?

fsegouin avatar Apr 16 '18 16:04 fsegouin

For windows: Write your own list_modules function to returns a dictionary of module name to modBaseAddr https://github.com/n1nj4sec/memorpy/blob/master/memorpy/WinProcess.py#L268

The base address of a process process.exe would be the "process.exe" entry of the returned dictionary

Note that you mmay want to change WinStructures since it's got a wrong definition of MODULEENTRY32

hrt avatar Mar 06 '20 15:03 hrt

Check https://github.com/hrt/memorpy for an example

hrt avatar Mar 07 '20 15:03 hrt