mdmp - open-source x86 memory/process (command-line) dumper with Python bindings
libmdmp is a C library designed to dump process memory on Windows.
mdmp.exe is a command-line tool exposing most functionality in libmdmp (process/stack/heap/random-mem-address dumping).
pymdmp.pyd is a Python wrapper (only built for 2.7 as of now, trivial to adapt to any 2.x) exposing the memory-dumping functionality in Python.
Example usage:
mdmp: mdmp.exe /n:explo /e:kernel - will dump all modules (DLLs) whose name contains "kernel" from all the processes whose name contains "explo"
pymdmp: import pymdmp lst = pymdmp.dump(pymdmp.SEL_BY_NAME, pymdmp.DUMP_IMAGE_BY_NAME, 0, processName="explo", moduleName="kernel") - will return in lst a list of tuples (<process_name>, <PID>, <dump-start-address>, <dump-data>)
Delphi bindings are planned. Feedback is welcome @ vtopan/gmail.
