Windows 进程内存转储(dump)工具 - HiperDrop

HiperDrop是一款简单的、基于命令行的windows进程内存转储(dump)工具，它能够附加到进程，读取进程的整个内存，然后，将进程整个内存的数据保存到磁盘上。该工具不同于LordPE 和OllyDump，因为它可以下载进程的整个内存到磁盘上。另外，HiperDrop使用C++编写并开放源代码。
工具更多信息及下载地址参见这里:http://gynvael.coldwind.pl/?id=327

    Anyway, it's called HiperDrop, and it's a simple command line process memory dumper for Windows.Basically, it attaches to a process, read the whole memory (unlike LordPE / OllyDump, this tool is design to download the whole memory of the process), and saves it to disk.
Get More from here:http://gynvael.coldwind.pl/?id=327

转载于:https://www.cnblogs.com/cmleung/archive/2012/11/06/2757825.html