scanmem: memory scanner for Linux

by do son · Published February 4, 2019 · Updated February 4, 2019

scanmem is a debugging utility designed to isolate the address of an arbitrary variable in an executing process. scanmem simply needs to be told the pid of the process and the value of the variable at several different times.

After several scans of the process, scanmem isolates the position of the variable and allows you to modify its value.

GUI

GameConqueror is a GUI front-end for scanmem, providing more features, such as:

Flexible syntax for searching
Easier and multiple variable locking
Better process finder
Memory browser/editor

Build Requirements
The build requires autotools-dev, libtool, libreadline-dev, intltool, and python.

Build and Install
To generate files required for the build:

git clone https://github.com/scanmem/scanmem.git
./autogen.sh

To build with GUI:

./configure –prefix=/usr –enable-gui && make
sudo make install

To build without GUI:

./configure –prefix=/usr && make
sudo make install

scanmem and GameConqueror use static paths to libscanmem. So executing ldconfig is not required. Consider setting –libdir=/usr/lib/scanmem or –libdir=/usr/lib64/scanmem to avoid that libscanmem is in a library search path.

Run ./configure –help for more details.

Android Build
You need a standalone toolchain of Android NDK (Advanced method) to build interactive capabilities for Android. For more information, run:

./build_for_android.sh help

Usage

The interface is similar to the Windows-only Cheat Engine.

Enter a value to search in the Value entry, then press Enter or the scan buttons
- Check supported syntax hovering over the ‘?’ mark
- You scan choose the search region/type via the dropdowns.
- Number of matches will be shown in ‘Found: XX’ at topleft
- Matches will be displayed in the left list if there are not too many
Add a candidate address to the list below by double-click on it or use the context menu
There you can edit description, value, and lock it.

Copyright (C) WANG Lu <coolwanglu(a)gmail.com>
Andrea Stacchiotti <andreastacchiotti(a)gmail.com>

Source: https://github.com/