D
D
Dutymy2021-07-22 04:09:07
C++ / C#
Dutymy, 2021-07-22 04:09:07

Is it possible to read physical addresses to RAM?

Hello, can I read the address space of a windows virtual machine from outside. That is, I would like wndows to be running in a virtual machine installed on kali Linux, and being outside, I could secretly collect memory dumps of virtualized windows. Since this is done for absolutely covert reading of the application's memory, obviously I will need to somehow identify the address space of the victim application on windows and compare it with the memory dump ... Has anyone done something similar))

Answer the question

In order to leave comments, you need to log in

1 answer(s)
1
15432, 2021-07-22
@Dutymy

Of course, enable debugging of the Windows kernel, connect to COM1 of the virtual machine, and you can read the memory of any application with the usual commands of the WinDbg debugger.

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question