A python library for MacOS, providing the base functions required for memory manipulation.
- Memory read/write helpers.
- Base address searcher
- Modules name and address dumper
- Live in-memory modules macho-o address parser/dumper (64-bit implementation).
- Useful for finding address of different sections (__DATA, __TEXT) and even their respective segments.
You can install pymem from source.
git clone https://github.com/qtkite/pymem-osx.git
cd pymem-osx
python3 -m pip install -e .
Alternatively you can do:
pip install pymem-osx
When running your python script, it must be elevated (in sudo mode) for the api calls to work.
Buy me a coffee to support some of the work I put out
