Mar 022008
The Princeton guys that I mentioned in my last post have not released the tools that they used in their paper, yet. I wanted to play around with the way PC’s tend to retain memory, so I’ve written my own implementation of the RAM dumper they describe and show in their videos:
Now, you can try it out for yourself, and see how you can recover text, images, and other data (such as encryption keys!) from memory after the plug has been pulled for a short period of time.
To bad I do not have a USB bootable computer or else I would try it.
msramdmp – Cold Boot Attacke starten…
Die Cold Boot Attacke geistert ja bereits seit einiger Zeit durch die Blogosphäre, doch nun wurde das erste passende Tool veröffentlicht. Leider nicht von den Leuten von der Princeton Universität sondern von Wiesel McGrew, der auch ein spannendes Bl…
Thank you very much for making this available. it has been very helpful.