vmmap
Command vmmap
vmmap
displays the target process's entire memory space mapping.
Interestingly, it helps finding secret gems: as an aware reader might have
seen, memory mapping differs from one architecture to another (this is one of
the main reasons I started GEF
in a first place). For example, you can learn
that ELF running on SPARC architectures always have their .data
and heap
sections set as Read/Write/Execute.
vmmap
accepts one argument, either a pattern to match again mapping names,
or an address to determine which section it belongs to.