📚 OpenRCE is preserved as a read-only archive. Launched at RECon Montreal in 2005. Registration and posting are disabled.








Flag: Tornado! Hurricane!

Blogs >> tnagareshwar's Blog

Created: Monday, October 6 2008 01:01.02 CDT Modified: Monday, October 6 2008 01:04.21 CDT
Printer Friendly ...
ProcHeapViewer with integrated search feature
Author: tnagareshwar # Views: 2020

ProcHeapViewer 2.0, tool to scan process heaps now comes with integrated search feature which makes it easy to find ASCII as well as Unicode strings within the heap blocks.

Also this new version has better user interface which not only gives it cool look & feel but makes it easy to use.

The powerful aspect of this tool is that it scans process heaps faster than any other method as it does not use typical Windows heap functions but uses undocumented techniques which improves the performance substantially.
I have published detailed article explaining about this undocumented technique along with code sample.


It is very useful for anyone who is researching around process heaps for example vulnerability researchers playing with heap overflow vulnerabilities. Now with search feature it will be more easier and faster to use than earlier.



For more details and download, please visit the main page of the ProcHeapViewer.

Any feedbacks and suggestions are welcome...






Add New Comment
Comment:









There are 31,328 total registered users.


Recently Created Topics
[help] Unpacking VMP...
Mar/12
Reverse Engineering ...
Jul/06
let 'IDAPython' impo...
Sep/24
set 'IDAPython' as t...
Sep/24
GuessType return une...
Sep/20
About retrieving the...
Sep/07
How to find specific...
Aug/15
How to get data depe...
Jul/07
Identify RVA data in...
May/06
Question about memor...
Dec/12


Recent Forum Posts
Finding the procedur...
rolEYder
Question about debbu...
rolEYder
Identify RVA data in...
sohlow
let 'IDAPython' impo...
sohlow
How to find specific...
hackgreti
Problem with ollydbg
sh3dow
How can I write olly...
sh3dow
New LoadMAP plugin v...
mefisto...
Intel pin in loaded ...
djnemo
OOP_RE tool available?
Bl4ckm4n


Recent Blog Entries
halsten
Mar/14
Breaking IonCUBE VM

oleavr
Oct/24
Anatomy of a code tracer

hasherezade
Sep/24
IAT Patcher - new tool for ...

oleavr
Aug/27
CryptoShark: code tracer ba...

oleavr
Jun/25
Build a debugger in 5 minutes

More ...


Recent Blog Comments
nieo on:
Mar/22
IAT Patcher - new tool for ...

djnemo on:
Nov/17
Kernel debugger vs user mod...

acel on:
Nov/14
Kernel debugger vs user mod...

pedram on:
Dec/21
frida.github.io: scriptable...

capadleman on:
Jun/19
Using NtCreateThreadEx for ...

More ...


Imagery
SoySauce Blueprint
Jun 6, 2008

[+] expand

View Gallery (11) / Submit