0xDEADBEEF

procmem.php

Dump anonymous memory of a given process.

$pid = $argv[1];
$f = fopen("/proc/$pid/mem", "r");
foreach (file("/proc/$pid/maps") as $l) {
  [$range, $perms, $offset, $dev, $inode, $pathname] = preg_split('~\s+~', $l);
  if (!(str_starts_with($perms, 'rw-') && $inode === '0')) continue;
  [$start, $end] = explode('-', $range);
  fseek($f, hexdec($start));
  echo fread($f, hexdec($end) - hexdec($start));
}