Skip to main content

Module elfinfo

Module elfinfo 

Source
Expand description

Linux ELF header extraction from process memory.

Walks process VMAs and checks for the ELF magic (\x7fELF) at the start of file-backed regions. Extracts ELF header fields to identify loaded binaries and shared libraries.

Functionsยง

walk_elfinfo
Walk all process VMAs and extract ELF headers.