@ymuu

renefdump - android memory dumper for renef Please follow instructions from the github: https://github.com/ymuuuu/renefdump Usage should be from the bash script as follows: ./renefdump.sh <package> # attach to the running app, dump, pull ./renefdump.sh -a <pid> # attach by pid instead of package ./renefdump.sh -s <package> # spawn first (rarely useful: empty heap) ./renefdump.sh -o <dir> <package> # local output parent (default: ./dumps) ./renefdump.sh -r <path> <package> # path to the renef client binary ./renefdump.sh -k <package> # keep the dump on the device (skip cleanup) Dumps writable memory ranges of the target process into the app's own writable directory (SELinux: an untrusted_app cannot write shell_data_file, so /data/local/tmp is off-limits regardless of chmod), then prints the su commands to stage and pull them to the host.