membuddy

Dynamic memory analysis & visualisation tool for security researchers

membuddy-beta-1.zip
Requires macOS 12.0 or later, iOS 12 or later




Live Memory Monitoring

Browse the memory of your target process in a debugger-like UI, with the addition of pointer detection. Optionally use the memory refresh feature to display changes to values while the target executes.







Visual Block Creation

Add blocks to the block canvas to visually represent important areas of memory and name them accordingly. Display the relationship between different areas of memory through the use of connection lines.







Contextual Typing

Interpret block data as specific C structure types relevant to your target process. Struct member names are listed alongside the values in memory.