vmmap

Command vmmap

vmmap displays the target process's entire memory space mapping.

Interestingly, it helps finding secret gems: as an aware reader might have seen, memory mapping differs from one architecture to another (this is one of the main reasons I started GEF in a first place). For example, you can learn that ELF running on SPARC architectures always have their .data and heap sections set as Read/Write/Execute.

vmmap accepts one argument, either a pattern to match again mapping names, or an address to determine which section it belongs to.

The address can be also be given in the form of a register or variable.