memguard

MemGuard Software enclave for storage of sensitive information in memory. This package attempts to reduce the likelihood of sensitive data being exposed when in memory. It aims to support all major operating systems and is written in pure Go. Features Sensitive data is encrypted and authenticated...

BareMetal-RAM-Dumper

BareMetal RAM Dumper 디스크/USB로 부팅하여 시스템의 RAM을 부팅 매체에 직접 덤프하도록 설계된 간단한 x86 베어메탈 도구입니다. BIOS 인터럽트를 사용하여 부팅 및 디스크 작업을 수행하고, 1MB 장벽 위의 메모리에 접근하기 위해 언리얼 모드unreal mode로 전환합니다. 배경: 콜드 부트 공격 ❄️ 이 도구는 원래 콜드 부트 공격 실험을 위해 개발되어 성공적으로 테스트되었습니다. 노트북의 RAM을 -60°C까지 얼린 후, 이 도구가 포함된 USB 드라이브로 빠르게 재부팅하면 데이터가 소멸되기 전에...

Centry

Centry 警告: これは実験的なソフトウェアです。バグが含まれている可能性があります。 更新 すでにCentryをインストールしている場合は、git pullを実行して最新バージョンに更新してください。最新の更新により、リプレイ攻撃に対するセキュリティが大幅に向上しています。 はじめに Centry は、コールドブート攻撃やダイレクトメモリアクセス攻撃など、動作中のシステムに対する脅威からユーザーを保護するためのパニックボタンです。Centry は、フルディスク暗号化を利用し、スワップ/ページファイルがないシステムに導入した場合に最も効果的です。パニック機能は、GUI...

CVE-2022-45163: Observable Discrepancy

An information-disclosure vulnerability exists on select NXP devices when configured in Serial Download Protocol SDP mode: i.MX RT 1010, i.MX RT 1015, i.MX RT 1020, i.MX RT 1050, i.MX RT 1060, i.MX 6 Family, i.MX 7Dual/Solo, i.MX 7ULP, i.MX 8M Quad, i.MX 8M Mini, and Vybrid. In a device...

Moto E20 Readback Vulnerability

09/11/2022 Update: CVE ID CVE-2022-3917 has been reserved, with Lenovo to publish the Advisory Summary. TL;DR The Motorola E20 is an entry-level smartphone that uses a Unisoc system-on-chip. Motorola holds around 10% of the US smartphone market, though the sales of the E20 as a subset of that are...

Bug in NVIDIA’s Tegra Chipset Opens Door to Malicious Code Execution

A flaw impacting millions of mobile and internet of things IoT devices running NVIDIA’s Tegra processor opens the door for a variety of attacks, including device hijacking or siphoning of data. The warning comes from researcher Triszka Balázs, who discovered the flaw and asserts that the bug...

New Variants of Cold-Boot Attack

If someone has physical access to your locked -- but still running -- computer, they can probably break the hard drive's encryption. This is a "cold boot" attack, and one we thought solved. We have not: To carry out the attack, the F-Secure researchers first sought a way to defeat the the...

Researchers Heat Up Cold-Boot Attack That Works on All Laptops

A pair of researchers have developed an attack method that can bypass mitigations for cold-boot attacks on laptops. A physical attacker can compromise a laptop that’s in sleep mode, potentially lifting sensitive passwords, encryption keys and other information. The ramifications are, on the...

A Decade-Old Attack Can Break the Encryption of Most PCs

The computer industry thought cold boot hacks were solved 10 years ago. Researchers have proven that's not the case...

New Cold Boot Attack Unlocks Disk Encryption On Nearly All Modern PCs

Security researchers have revealed a new attack to steal passwords, encryption keys and other sensitive information stored on most modern computers, even those with full disk encryption. The attack is a new variation of a traditional Cold Boot Attack, which is around since 2008 and lets attackers...

New Cold Boot Attack Unlocks Disk Encryption On Nearly All Modern PCs

Security researchers have revealed a new attack to steal passwords, encryption keys and other sensitive information stored on most modern computers, even those with full disk encryption. The attack is a new variation of a traditionalCold Boot Attack , which is around since 2008 and lets attackers...

Research Outlines New Deep Freeze Data Recovery Technique on Android Phone

Hackers and data recovery specialists alike could soon be turning to a new technique that under the right conditions can allow for the harvesting of personal information from phones, even after they’ve been frozen. A group of German researchers from the University of Erlangen-Nuremberg have...