wbaby / fmemory

A simple node add-on for reading and writing memory on GNU/Linux.

fmemory

A simple node add-on for reading and writing memory on GNU/Linux.

---

features:

• memory reading
• memory writing
• pattern scanning (still wip)
• get process id through process name
• get module base address through module name
• get call address
• get the absolute location of an address (get absolute address)

todo:

• vector3d and vector2d support (read, write)
• ability to call virtual functions
• shellcode execution (maybe)

🚧 more to come..

installing:

Since this is a Node add-on, you'll need node-gyp, node-addon-api and a C++ compiler (GCC).

To install this add-on simply type: npm install fmemory

usage:

The usage is pretty straight-forward.

Here's how:

const fmemory = require('fmemory');

const clientStateAddress = 0xDEADBEEF
const deltaTickOffset = 0x123

(function main() {

  // get process id
  const processID = fmemory.getProcessID('csgo_linux64')
  
  // get engine module base address
  const engineModuleBaseAddress = fmemory.getModuleBaseAddress('engine_client.so', processID)
  
  // get client state address
  const pClientState = fmemory.readMem(engineModuleBaseAddress + clientStateAddress, fmemory.INT)

  if (pClientState) {
    
    // force update
    fmemory.writeMem(pClientState + deltaTickOffset, -1 /* <- value */, fmemory.BYTE)
  } 
  
})()

NOTE: This works with Wine/Proton as well.

documentation:

When using the writeMem or readMem you will need to tell the data type parameter, it can either be a string:

'int', 'uint', 'long',
'ulong', 'short', 'float',
'double', 'byte', 'bool'

Or you can use one of the constants provided by the library:

fmemory.INT, fmemory.UINT, fmemory.LONG,
fmemory.ULONG, fmemory.SHORT, fmemory.FLOAT,
fmemory.DOUBLE, fmemory.BYTE, fmemory.BOOL

---

fmemory is available under the MIT License