Skip to content

stringposition function #38

@corelanc0d3r

Description

@corelanc0d3r

Feature request:

function takes an address as input

if that address points at a memory position that contains ascii-printable data, then

  • read back in memory to find the start of the string (i.e. a non-ascii printable character or a non-accessible page)
  • read forward again to determine the length of the string (until a null (double null in case of unicode) or non-ascii printable character)

the function needs to return:

  • if the address points to a string yes or no
  • the start address of the string
  • the position of the input address inside the string
  • the value at the input address (taking architecture into consideration - 4 characters on 32bit, 8chars on 64bit)
  • the length of the string (in characters and in bytes)

the string can be ansi, or unicode. in case of unicode, count the number of characters (i.e. one character, 2 bytes)

add the function as a separate command, but also allow it to function in "silent" mode, i.e. being called from another command and only producing the requested information

Metadata

Metadata

Assignees

No one assigned

    Labels

    enhancementNew feature or request

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions