BareMetal-RAM-Dumper

BareMetal 内存转储工具 一个简单的 x86 裸机工具，设计用于从磁盘/USB 启动，并直接将系统内存转储到启动介质。它依赖于 BIOS 中断进行启动和磁盘操作，并进入非实模式以访问 1MB 屏障以上的内存。 背景：冷启动攻击 ❄️ 本工具最初是为实验冷启动攻击 而开发并成功测试的。通过冻结笔记本电脑的 RAM（低至 -60°C），然后快速从包含此工具的 USB 驱动器重新启动，可以在数据衰减之前将冻结的内存内容转储到磁盘，从而可以提取加密密钥等敏感信息。 特性 自定义引导加载程序： 直接通过 BIOS（Legacy CSM）启动。无需操作系统。 非实模式：...

LiMEaide

LiMEaide v2.0 by Daryl Bennett - kd8bnyatgmaildotcom About LiMEaide is a python application designed to remotely or locally dump RAM of a Linux client and create a volatility profile for later analysis on your local host. I hope that this will simplify Linux digital forensics in a remote...

EUVD-2019-5311

Malware in sbrugna...

EUVD-2017-7263

Malware in sbrugna...

CVE-2019-14054

Improper permissions in XBLSEC region enable user to update XBLSEC code and data and divert the RAM dump path to normal cold boot path in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in Kamorta, MSM8998,...

Information disclosure

In handleramdump of pixelloader.c, there is a possible way to create a ramdump of non-secure memory due to a missing permission check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2022-20182

CVE-2022-20182 concerns the Android kernel component handle_ramdump inside pixel_loader.c. The vulnerability arises from a missing permission check, enabling creation of a ramdump of non-secure memory and potentially leading to local information disclosure with SYSTEM privileges required. Exploit...

CVE-2019-14054

Improper permissions in XBLSEC region enable user to update XBLSEC code and data and divert the RAM dump path to normal cold boot path in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in Kamorta, MSM8998,...

CVE-2019-14054

CVE-2019-14054 describes an improper permissions issue in the XBL_SEC region that lets a local attacker update XBL_SEC code/data and divert the RAM dump path to a normal cold boot path on Qualcomm Snapdragon platforms. Affected families include Snapdragon Compute, Snapdragon Consumer IoT, Snapdra...

CVE-2019-14054

Improper permissions in XBLSEC region enable user to update XBLSEC code and data and divert the RAM dump path to normal cold boot path in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in Kamorta, MSM8998,...

CVE-2017-15841

When HOST sends a Special command ID packet, Controller triggers a RAM Dump and FW reset in Snapdragon Mobile in version SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 820, SD 835, SnapdragonHighMed2016...

Design/Logic Flaw

When HOST sends a Special command ID packet, Controller triggers a RAM Dump and FW reset in Snapdragon Mobile in version SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 820, SD 835, SnapdragonHighMed2016...

CVE-2017-15841

CVE-2017-15841 affects Snapdragon Mobile on multiple SoCs (SD 410/12, 425, 427, 430, 435, 450, 615/16/SD 415, 625, 650/52, 820, 835, Snapdragon_High_Med_2016). The issue occurs when HOST sends a Special command ID packet, causing the Controller to trigger a RAM dump and a FW reset. Documented imp...

CVE-2017-15841

When HOST sends a Special command ID packet, Controller triggers a RAM Dump and FW reset in Snapdragon Mobile in version SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 820, SD 835, SnapdragonHighMed2016...

Remotely Dump Linux RAM: LiMEaide

LiMEaide is a python application designed to remotely dump RAM of a Linux client and create a volatility profile for later analysis on your local host. I hope that this will simplify Linux digital forensics in a remote environment. In order to use LiMEaide all you need to do is feed a remote Linu...

Root Exploit in Devices with Samsung's Exynos Processors

An XDA Developers forum member operating under the handle alephzain has created an exploit that obtains root privileges and enables malicious application installation on the many Samsung devices that contain Exynos 4210 and 4412 processors. The list of devices that use the affected processors...