763 Followers
286 Following
49 Posts
IT-Security Minion | DMA Hacker | http://github.com/ufrisk | twitter.com/UlfFrisk | PCILeech | MemProcFS
Githubhttps://github.com/ufrisk
Twitterhttps://twitter.com/UlfFrisk
Bloghttps://blog.frizk.net
DiscordUlfFrisk#5780

@reverseics Thank You for your sponsorship 💖 It's things like this making it worth for me to continue working on PCILeech after all these years.

It's super nice to know you found my tools useful. And yeah, PCILeech has become very popular with games as of late. I didn't create the tool with the games use case in mind, and I try to keep some distance to avoid troubles. Still, it's super nice to see you found PCILeech useful, and I wish you the best of luck in your research!

Donated to the PCILeech project today.

It is amazing how easy dma stuff is now. And how cheap. I tooted some appreciaation earlier in the week, but this afternoon I had some first success against an actual research target. The victim does a pretty good job of locking things down, but DMA attacks are really fun when they work.

Thanks to @UlfFrisk, and of course to the videogame cheating community (like 99.5% of the tutorials on flashing and using pcileech have "setting up your aimboat" as the last step, lulz).

I'm not a gamer, but I kinda appreciate that there is a weird community of people doing DMA attacks in order to 'win' at shooters or whatever. They certainly make the hardware cost a lot less...

PCILeech PCIe DMA attacks and MemProcFS memory forensics now runs on macOS analyzing Windows memory!

MemProcFS 5.14 and PCILeech 4.19 just released!
https://github.com/ufrisk/MemProcFS
https://github.com/ufrisk/pcileech

MemProcFS 5.13 released!

Callstack parsing, improved file recovery and more! MemProcFS - easy and fast memory forensics! https://github.com/ufrisk/MemProcFS

GitHub - ufrisk/MemProcFS: MemProcFS

MemProcFS. Contribute to ufrisk/MemProcFS development by creating an account on GitHub.

GitHub

Improvements to MemProcFS forensic file recovery in 5.12.6. More data is now recovered, with correct file sizes, and with file signing info!

MemProcFS super fast memory forensics and analysis: https://github.com/ufrisk/MemProcFS

GitHub - ufrisk/MemProcFS: MemProcFS

MemProcFS. Contribute to ufrisk/MemProcFS development by creating an account on GitHub.

GitHub
@Lee_Holmes Huge thanks for sharing! I'll definitely be looking into this 😀

MemProcFS now supports console text recovery!

Recover text from Cmd and Powershell to Find Evil with MemProcFS super fast memory forensics!

https://github.com/ufrisk/MemProcFS

GitHub - ufrisk/MemProcFS: MemProcFS

MemProcFS. Contribute to ufrisk/MemProcFS development by creating an account on GitHub.

GitHub

MemProcFS 5.10 released! Support for Windows 11 24H2 added!

MemProcFS - super fast memory forensics of live memory and memory dumps!
https://github.com/ufrisk/MemProcFS

GitHub - ufrisk/MemProcFS: MemProcFS

MemProcFS. Contribute to ufrisk/MemProcFS development by creating an account on GitHub.

GitHub

microsoft: Exploit Code Unporoven

me: i literally gave you a compiled PoC and also exploit code

m$: No exploit code is available, or an exploit is theoretical.

me:

Added a quick system overview to MemProcFS memory forensics. Check out one place for a summary rather than many locations as before.
https://github.com/ufrisk/MemProcFS
GitHub - ufrisk/MemProcFS: MemProcFS

MemProcFS. Contribute to ufrisk/MemProcFS development by creating an account on GitHub.

GitHub