Kiwi

A package for memory editing in go.

Current Features

• Reading and Writing with support for [uint & int 8, 16, 32, 64] [float 32, 64] data types
• Support for Windows and Linux(assuming /proc/ directory exists.)

Future plans

• Pattern scanning for bytecode
• Call remote functions via injected assembly
• Hooking functions via injected assembly
• Setting breakpoints via windows debugging api
• Mono runtime features (if hooking and remote functions are possible)

Installation

go get github.com/Andoryuuta/kiwi

Usage

package main

import (
	"log"

	"github.com/Andoryuuta/kiwi"
)

func main() {
	// The memory address of variable inside of target process.
	externVarAddr := uintptr(0x001A51E8)

	// Find the process from the executable name.
	proc, err := kiwi.GetProcessByFileName("example.exe")
	if err != nil {
		log.Fatalln("Error while trying to find process.")
	}

	// Read from the target process.
	externVar, err := proc.ReadUint32(externVarAddr)
	if err != nil {
		log.Fatalln("Error while trying to read from target process.")
	}

	// Output the variable we read.
	log.Println("Read", externVar)

	// Write a new value of 1000 to the variable
	err = proc.WriteUint32(externVarAddr, 1000)
	if err != nil {
		log.Fatal(err)
	}
}