Re: Memory manipulator

2008-08-30 Thread Tzafrir Cohen
On Sat, Aug 30, 2008 at 07:55:32AM +0300, Noam Rathaus wrote:
> Hi,
> 
> I have been using Cheat Engine (http://www.cheatengine.org/) to manipulate 
> the 
> memory of applications on Windows for quite some time - mainly useful for 
> testing software for quirks and bugs.
> 
> I was wondering whether someone knew of a equivalent program for Linux?
> 
> I am mainly looking for memory value discovery and value changing abilities.

I don't understand exactly what are the data you have and which are
missing. On a first glance it seems that Cheat Engine relies on
hand-crafted symbols tables provided by the user.

So ptrace gives the required low-level abilities. If I understand things
correctly: what you need is gdb with hand-crafted symbol tables, right?

-- 
Tzafrir Cohen | [EMAIL PROTECTED] | VIM is
http://tzafrir.org.il || a Mutt's
[EMAIL PROTECTED] ||  best
ICQ# 16849754 || friend

=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]



Re: Memory manipulator

2008-08-30 Thread sara fink
I think you are looking for shmtool. Here is a link:
http://tldp.org/LDP/lpg/node73.html

On Sat, Aug 30, 2008 at 7:55 AM, Noam Rathaus <[EMAIL PROTECTED]>wrote:

> Hi,
>
> I have been using Cheat Engine (http://www.cheatengine.org/) to manipulate
> the
> memory of applications on Windows for quite some time - mainly useful for
> testing software for quirks and bugs.
>
> I was wondering whether someone knew of a equivalent program for Linux?
>
> I am mainly looking for memory value discovery and value changing
> abilities.
>
> --
> Noam Rathaus
> CTO
> [EMAIL PROTECTED]
> http://www.beyondsecurity.com
>
> "Know that you are safe."
>
> Beyond Security Finalist for the "Red Herring 100 Global" Awards 2007
>
> =
> To unsubscribe, send mail to [EMAIL PROTECTED] with
> the word "unsubscribe" in the message body, e.g., run the command
> echo unsubscribe | mail [EMAIL PROTECTED]
>
>


Re: Memory manipulator

2008-08-30 Thread Noam Rathaus
Hi Tzafrir,

One of the abilities of Cheat Engine - beside being a games cheating
machine, is to look for values in the memory, then search again for values,
and leave only those that matched the previous set, etc

As well as start of with an unknown value, and only look for those that
increased, decreased, etc

On Sat, Aug 30, 2008 at 10:05 AM, Tzafrir Cohen <[EMAIL PROTECTED]>wrote:

> On Sat, Aug 30, 2008 at 07:55:32AM +0300, Noam Rathaus wrote:
> > Hi,
> >
> > I have been using Cheat Engine (http://www.cheatengine.org/) to
> manipulate the
> > memory of applications on Windows for quite some time - mainly useful for
> > testing software for quirks and bugs.
> >
> > I was wondering whether someone knew of a equivalent program for Linux?
> >
> > I am mainly looking for memory value discovery and value changing
> abilities.
>
> I don't understand exactly what are the data you have and which are
> missing. On a first glance it seems that Cheat Engine relies on
> hand-crafted symbols tables provided by the user.
>
> So ptrace gives the required low-level abilities. If I understand things
> correctly: what you need is gdb with hand-crafted symbol tables, right?
>
> --
> Tzafrir Cohen | [EMAIL PROTECTED] | VIM is
> http://tzafrir.org.il || a Mutt's
> [EMAIL PROTECTED] ||  best
> ICQ# 16849754 || friend
>
> =
> To unsubscribe, send mail to [EMAIL PROTECTED] with
> the word "unsubscribe" in the message body, e.g., run the command
> echo unsubscribe | mail [EMAIL PROTECTED]
>
>


Re: Small victories, but more work to be done

2008-08-30 Thread Gilad Ben-Yossef

Nadav Har'El wrote:


On Wed, Aug 27, 2008, Dotan Cohen wrote about "Small victories, but more work to be 
done":
  

Today I got a letter from YNET that they are moving their videos to
Flash from WMV to support Firefox and Linux users.



Hi,

I'm a bit curious - why do you consider changing from WMV to Flash important
for Linux or Firefox users?

Last time I checked, most Linux distributions could play neither WMV nor
Flash movies out of the box, but software to do both is available for free.
Software to play WMV is even available as free software (e.g., mplayer)?
Or am I missing something?
  


True, but...

1. Adobe has released a full spec for their flash format allowing a 
complete Free implementation. They also released the scripting engine as 
open source.

2. Adobe provides a proprietary flash player for Linux.
3. WMV (really the associated codecs, but the affect is the same ) is 
covered by numerous patents which are activly protected in the most 
brutal way, whereas the FLV format, as so much that it is patented (I 
don't know it is but I assume it is) is not, at the moment.


Not a case of black and white by a long shot, but I would say flash is 
"brighter" then WMV.


Gilad


--
Gilad Ben-Yossef 
Chief Coffee Drinker


Codefidence Ltd.
The code is free, your time isn't.(TM)

Web:http://codefidence.com
Email:  [EMAIL PROTECTED]
Office: +972-8-9316883 ext. 201
Fax:+972-8-9316885
Mobile: +972-52-8260388

Q: How many NSA agents does it take to replace a lightbulb?
A: dSva7DrYiY24yeTItKyyogFXD5gRuoRqPNQ9v6WCLLywZPINlu!




Re: Memory manipulator

2008-08-30 Thread Gilad Ben-Yossef

Noam Rathaus wrote:


Hi,

I have been using Cheat Engine (http://www.cheatengine.org/) to manipulate the 
memory of applications on Windows for quite some time - mainly useful for 
testing software for quirks and bugs.


I was wondering whether someone knew of a equivalent program for Linux?

I am mainly looking for memory value discovery and value changing abilities.

  
At least in theory this should work. I say in theory, because I've been 
getting an error on my Ubuntu trying to open /proc/$PID/mem by YMMV:


$ cat /proc/$PID/mem | hexdump -c > before
$ cat /proc/$PID/mem | hexdump -c> after
$ diff before after

Gilad

--
Gilad Ben-Yossef 
Chief Coffee Drinker


Codefidence Ltd.
The code is free, your time isn't.(TM)

Web:http://codefidence.com
Email:  [EMAIL PROTECTED]
Office: +972-8-9316883 ext. 201
Fax:+972-8-9316885
Mobile: +972-52-8260388

Q: How many NSA agents does it take to replace a lightbulb?
A: dSva7DrYiY24yeTItKyyogFXD5gRuoRqPNQ9v6WCLLywZPINlu!