wiki.matoken.org

• Lest We Remember: Cold Boot Attacks on Encryption Keys \- Center for Information Technology Policy
• Lest We Remember: Cold Boot Attacks on Encryption Keys \- YouTube Video
• Memory Research Project Source Code \- Center for Information Technology Policy source code

$ wget https://citpsite.s3.amazonaws.com/memory-content/src/bios_memimage-1.2.tar.gz https://citpsite.s3.amazonaws.com/memory-content/src/bios_memimage-1.2.tar.gz.asc https://citpsite.s3.amazonaws.com/memory-content/src/memory-src-signing-key.asc
$ gpg --import ./memory-src-signing-key.asc
$ gpg --verify ./bios_memimage-1.2.tar.gz.asc
gpg: assuming signed data in './bios_memimage-1.2.tar.gz'
gpg: Signature made Thu 12 Feb 2009 10:50:39 PM JST
gpg:                using DSA key B8841A919D0FACE4
gpg: Good signature from "Jacob Appelbaum <jacob@appelbaum.net>" [expired]
gpg: Note: This key has expired!
Primary key fingerprint: 12E4 04FF D3C9 31F9 3405  2D06 B884 1A91 9D0F ACE4
$ tar xf ./bios_memimage-1.2.tar.gz
$ cd bios_memimage
$ make -f Makefile.64
$ find . -executable -type f
./pxe/scraper.bin
./pxe/scraper
./usbdump/usbdump
./pxedump/pxedump
./usb/usb.bin
./usb/usb
./usb/boot.bin
./usb/boot
$ ls -l usb/scraper.bin                                                            
-rw-r--r-- 1 matoken matoken 26816 Jun 21 19:14 usb/scraper.bin
$ sudo dd if=usb/scraper.bin of=/dev/sdn

🧊
🧊
🧊

$ sudo ./usbdump /dev/sdb> memdump.img
$ strings memdump.img | grep keyword

• findaes download | SourceForge.net

URL

  ____   _____ ______   ____  ____ 
 / __ \ / ___//_  __/  / __/ / __ \
/ /_/ // (_ /  / /    / _/  / /_/ /
\___\_\\___/  /_/    /___/  \____/