Skip to content

Instantly share code, notes, and snippets.

@fgsahoward

fgsahoward/examining_process_memory_regions

Created June 11, 2018 17:17
Show Gist options
  • Save fgsahoward/134079e8a156282f2380dd6764ed044b to your computer and use it in GitHub Desktop.
Save fgsahoward/134079e8a156282f2380dd6764ed044b to your computer and use it in GitHub Desktop.
Download ZIP
Raw
examining_process_memory_regions
[howard@sterling bof]$ pidof cat
16604
[howard@sterling bof]$ cat /proc/16604/maps
00400000-0040c000 r-xp 00000000 08:02 2893873 /usr/bin/cat
0060b000-0060c000 r--p 0000b000 08:02 2893873 /usr/bin/cat
0060c000-0060d000 rw-p 0000c000 08:02 2893873 /usr/bin/cat
0060d000-0062e000 rw-p 00000000 00:00 0 [heap]
7ffff785b000-7ffff7a3c000 r--p 00000000 08:02 2905881 /usr/lib/locale/locale-archive
7ffff7a3c000-7ffff7bd1000 r-xp 00000000 08:02 2886815 /usr/lib/libc-2.24.so
7ffff7bd1000-7ffff7dd0000 ---p 00195000 08:02 2886815 /usr/lib/libc-2.24.so
7ffff7dd0000-7ffff7dd4000 r--p 00194000 08:02 2886815 /usr/lib/libc-2.24.so
7ffff7dd4000-7ffff7dd6000 rw-p 00198000 08:02 2886815 /usr/lib/libc-2.24.so
7ffff7dd6000-7ffff7dda000 rw-p 00000000 00:00 0
7ffff7dda000-7ffff7dfd000 r-xp 00000000 08:02 2886814 /usr/lib/ld-2.24.so
7ffff7fb3000-7ffff7fd7000 rw-p 00000000 00:00 0
7ffff7ff8000-7ffff7ffa000 r--p 00000000 00:00 0 [vvar]
7ffff7ffa000-7ffff7ffc000 r-xp 00000000 00:00 0 [vdso]
7ffff7ffc000-7ffff7ffd000 r--p 00022000 08:02 2886814 /usr/lib/ld-2.24.so
7ffff7ffd000-7ffff7ffe000 rw-p 00023000 08:02 2886814 /usr/lib/ld-2.24.so
7ffff7ffe000-7ffff7fff000 rw-p 00000000 00:00 0
7ffffffde000-7ffffffff000 rw-p 00000000 00:00 0 [stack]
ffffffffff600000-ffffffffff601000 r-xp 00000000 00:00 0 [vsyscall]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment