Re: access memory

[kktmp1 <kktmp1 () gmail com>]

http://www.blackhat.com/presentations/bh-dc-10/Ames_Colin/BlackHat-DC-2010-colin-david-neurosurgery-with-meterpreter-wp.pdf



2010/2/5 Jeffs <jeffs () speakeasy net>

> Looks very intriguing.  Any links to the talk or video on that yet?
>
> Thanks.
>
>
> On 2/5/2010 2:18 PM, egypt () metasploit com wrote:
>
> > Colin Ames talked about this at his Blackhat DC presentation earlier
> > this week where he demonstrated using the meterpreter memory API to
> > steal credentials from a PuTTY process.  So yes, it's definitely
> > possible.
> >
> > egypt
> >
> > On Wed, Feb 3, 2010 at 10:48 PM, Carlos Perez
> > <carlos_perez () darkoperator com>  wrote:
> >
> >
> > >  From meterpreter you can achieve this
> > > http://www.metasploit.com/documents/api/rex/index.html
> > >
> > >
> > > On Feb 3, 2010, at 10:21 PM, Javier Aguinaga wrote:
> > >
> > > hi everbody. My question is:
> > >
> > > There is some way to access the data of the memory RAM of a process.
> > >
> > > I know use the memdump plugin with mdd, but i need access memory for read
> > > with irb.
> > > I not like dump the memory of the process, i need the options of
> > > manipulate.
> > >
> > > Its can possible?
> > >
> > > Thanks to all
> > > _______________________________________________
> > > https://mail.metasploit.com/mailman/listinfo/framework
> > >
> > >
> > > _______________________________________________
> > > https://mail.metasploit.com/mailman/listinfo/framework
> > _______________________________________________
> > https://mail.metasploit.com/mailman/listinfo/framework
>
> _______________________________________________
> https://mail.metasploit.com/mailman/listinfo/framework
_______________________________________________
https://mail.metasploit.com/mailman/listinfo/framework