A kernel module to read and write memory in a remote process.
Read and write memory in a remote process is a common task in game hacking. There are many ways to do this, but most of them are not very reliable. This kernel module is a reliable way to read and write memory in a remote process.
- build the android kernel according to the official documentation
- build the kernel module with the following command
make CC=clang LLVM=1 KDIR=<android-kernel>/out/android13-5.15/common
Using kernel_action (fork it)
- There is already both the Chinese and English readme in the repo, please read one of the two carefully
- Edit and add the necessary information to your kernel in config.env
- After adding the necessary settings, don't forget to check if rwMem of the Action kernel is on the latest version
- modify .github/workflows/build-kernel.yml in the repo if needed
- go to action and run the build-kernel.yml in your repo forked
- Download rwMem and load If it fails to load, enable Config REMOVE_MODULE_VERIFY
- good luck
- If you can't, ask for help
- clone this repository and my modification of keystone-bindings
- edit the file build.rs of keystone-bindings to add your PATH for the RWMEM repository
- download NDK and add to your system variables
- run
cargo ndk -t arm64-v8a build
Install the kernel module and then run the RWMem executable.
.
├── rwMem # The kernel module
└── RRWMem # A rust executable to communicate with the kernel module