Mac OS X Memory Reading menu

Shout-Out

User Tag List

Results 1 to 3 of 3
  1. #1
    enteleky's Avatar Member
    Reputation
    3
    Join Date
    May 2008
    Posts
    30
    Thanks G/R
    0/0
    Trade Feedback
    0 (0%)
    Mentioned
    0 Post(s)
    Tagged
    0 Thread(s)

    Mac OS X Memory Reading

    Currently I am using this(Free file hosting by Savefile.com) code to read and write memory to other processes on Mac OS X, and on Mac OS X you have to be in the group procmod or have root privileges to read or write memory. Simply put I have a program I made that I want to read parts of memory out of the WoW client and I run the program as root but I still get this error message:

    Program received signal EXC_BAD_ACCESS, Could not access memory.
    Reason: KERN_PROTECTION_FAILURE at address: 0x00000001

    even though I am root. I was wondering if anyone here had any ideas about it. I understand that most everyone uses Windows but I was just hoping that someone might have come up against this before.

    Mac OS X Memory Reading
  2. #2
    argh44z's Avatar Member
    Reputation
    19
    Join Date
    Nov 2007
    Posts
    93
    Thanks G/R
    0/1
    Trade Feedback
    0 (0%)
    Mentioned
    0 Post(s)
    Tagged
    0 Thread(s)
    Doesn't OSX implement the ptrace syscall? It's pretty standard amongst Unix and unix-like operating systems (including Linux). You can use PTRACE_PEEK_DATA w/ it. Most debuggers, such as gdb, are implemented using ptrace.

  3. #3
    enteleky's Avatar Member
    Reputation
    3
    Join Date
    May 2008
    Posts
    30
    Thanks G/R
    0/0
    Trade Feedback
    0 (0%)
    Mentioned
    0 Post(s)
    Tagged
    0 Thread(s)
    Mac OS X's implementation of ptrace is gutted and ripped out... You are not allowed to ptrace a process except for your own without a kernel module which I don't want to use because its slightly unstable.

    By the way if you don't want to look at the source code of the above I am using these functions:

    task_for_pid()
    vm_read_overwrite() <--- This one is failing with that message even though I get the task_for_pid() which is a protected function... Its like World of Warcraft has told the kernel to extra protect its memory but I have been searching for unix functions to do that and I have found none.
    Last edited by enteleky; 12-14-2008 at 04:11 PM.

Similar Threads

  1. White Paper : Memory reading
    By tttommeke in forum WoW Memory Editing
    Replies: 41
    Last Post: 06-19-2008, 02:30 AM
  2. WoW Leveling Bot Memory Reading
    By Lindoz12 in forum WoW Memory Editing
    Replies: 2
    Last Post: 02-21-2008, 06:25 PM
  3. VB .Net Memory Reading Project
    By Glitchy in forum WoW Memory Editing
    Replies: 4
    Last Post: 01-22-2008, 12:37 PM
  4. [AutoIT3] WoW Cordinator (X,Y,MapID and rotation memory reading)
    By Vladinator in forum World of Warcraft Bots and Programs
    Replies: 22
    Last Post: 05-15-2007, 03:26 AM
All times are GMT -5. The time now is 09:45 PM. Powered by vBulletin® Version 4.2.3
Copyright © 2025 vBulletin Solutions, Inc. All rights reserved. User Alert System provided by Advanced User Tagging (Pro) - vBulletin Mods & Addons Copyright © 2025 DragonByte Technologies Ltd.
Google Authenticator verification provided by Two-Factor Authentication (Free) - vBulletin Mods & Addons Copyright © 2025 DragonByte Technologies Ltd.
Digital Point modules: Sphinx-based search