Xe1phix-[PMap]-Cheatsheet-[v4.5.48].sh

##-===============================================-##
##   [+] Xe1phix-[PMap]-Cheatsheet-[v4.5.48].sh
##-===============================================-##
## ----------------------------------------------- ##
##   [?] PMap - Display Process Memory Maps
## ----------------------------------------------- ##


##\_________________________________________________________/##
##    /6/      \6\
##   /Y/        \Y\
##  (</__________\>)
##      |   r-  |           ## readable memory mapping
##      |   w   |           ## writable memory mapping
##      |   x   |           ## executable memory mapping
##      |   s   |           ## shared memory mapping or
##      |   p   |           ## private mapping.
##    <#---------#>



## ----------------------------------------------- ##
##   [?] PMap - Provide Memory Map libraries
##              Loaded by a running process
## ----------------------------------------------- ##


## ------------------------------------------------------------------------------ ##
     pmap -d $PID                ## Show the device format
## ------------------------------------------------------------------------------ ##
     pmap --extended $PID        ## Show the extended format
## ------------------------------------------------------------------------------ ##
     pmap -x $(pgrep java)       ## Show memory maps of processes running java
## ------------------------------------------------------------------------------ ##
     pmap -X $PID                ## Show  even  more  details
## ------------------------------------------------------------------------------ ##
     pmap -XX $PID               ## Show everything the kernel provides
## ------------------------------------------------------------------------------ ##
     pmap --show-path $PID       ## Show full path in the mapping column
## ------------------------------------------------------------------------------ ##



##-================================-##
##   [+] A processes memory maps
##-================================-##
cat /proc/$PID/maps


##-===================================-##
##   [+] process memory mapped files
##-===================================-##
## ------------------------------------------------------------------------------ ##
##     [?] the process’s memory mapped (shared) files
## ------------------------------------------------------------------------------ ##
pmap -x 6 | grep "[r-][w-][x-][s][R-]"


## ---------------------------------------------------------------------------------- ##
##   [?] PCat - Display the location of memory regions that have been copied
## ---------------------------------------------------------------------------------- ##
pcat -v $PID