frida / frida-mem-scan
PublicFast SIMD-accelerated memory scanner for Frida — in-process and cross-process (PID).
frida-mem-scan is a lightning-fast memory search tool that works with Frida. It helps you find specific values—like pointers, object instances, or class symbols—buried inside a program's memory. You can scan your own program or attach to any other running process by its ID. The scanner uses high-speed processor instructions to race through memory at up to 100+ gigabytes per second, returning every match with its exact location and which memory region it came from. It supports macOS on both Intel and Apple silicon, with Windows and Linux support planned.
How It Works
You discover frida-mem-scan when you need to find specific values hidden deep inside a program's memory, quickly and accurately.
You add frida-mem-scan to your Frida setup using a simple package command, and everything connects automatically.
You tell the scanner what you're looking for: either a raw memory address, a symbol name from a program library, or a symbol plus an offset.
The tool uses special high-speed instructions to scan billions of bytes per second, finding every match across all readable memory regions.
Perfect for testing ideas and debugging your own code without any special permissions.
Attach to any running process to find values inside it, like hunting for object instances by their class name.
The scanner returns every match it found, including the exact memory address, which target matched, and which memory region contained it.
In seconds, you have a complete list of locations where your target values exist, ready to use in your analysis or debugging work.
Star Growth
Repurpose is a Pro feature
Generate ready-to-use prompts for X threads, LinkedIn posts, blog posts, YouTube scripts, and more -- with full repo context baked in.
Unlock RepurposeSimilar repos coming soon.