Postingan

Menampilkan postingan dari Desember, 2024

Hardware USB3380 Testing

Gambar
  USB3380 Hardware: PCILeech uses PCIe hardware devices to read and write from the target system memory. This is achieved by using DMA over PCIe. No drivers are needed on the target system. Check out the PCILeech project for general information. PCILeech supports multiple hardware. USB3380 based hardware is only able to read 4GB of memory natively, but is able to read all memory if a kernel module (KMD) is first inserted into the target system kernel. FPGA based hardware is able to read all memory. PCILeech use the PLX Technologies USB3380 chip. The actual chip can be purchased for around $15, but it's more convenient to purchase a development board on which the chip is already mounted. Development boards can be purchased from BPlus Technology, or on eBay / Ali Express. Please note that adapters may be required too depending on your requirements. Please also note that the USB3380 is currently sold out. http://www.bplus.com.tw/PLX.html The hardware confirmed...

Kernel Dev pt2

 # Example file to demonstrate remote python functionality with the LeechAgent. # # Example: # pcileech.exe -device <device> -remote rpc://<spn or insecure>:host agent-execpy -in agent-find-rwx.py # # The python script will be executed in a child process to the LeechAgent in # the user-context of the LeechAgent. If the agent is running as a service this # is most likely SYSTEM. It's also possible to use this functionality to run # Python scripts on the remote host without using the memory analysis functionality. # # Please check out agent installation instructions at: # https://github.com/ufrisk/LeechCore/wiki/LeechAgent # https://github.com/ufrisk/LeechCore/wiki/LeechAgent_Install # # # Example to load LeechCore for Python connecting to the memory acqusition device # specified in the PCILeech -device parameter. Please uncomment to activate. # Guide at: https://github.com/ufrisk/LeechCore/wiki/LeechCore_API_Python # ''' import leechcorepyc lc = leechcorepyc....

Kernel Developer Bonty Riot part 1

 Microsoft Visual Studio Solution File, Format Version 12.00 # Visual Studio Version 16 VisualStudioVersion = 16.0.28729.10 MinimumVisualStudioVersion = 10.0.40219.1 Project("{8BC9CEB8-8B4A-11D0-8D11-00A0C91BC942}") = "pcileech", "pcileech\pcileech.vcxproj", "{DFFA1B4C-279B-4356-ADB1-08A6F4795931}" EndProject Project("{8BC9CEB8-8B4A-11D0-8D11-00A0C91BC942}") = "pcileech_shellcode", "pcileech_shellcode\pcileech_shellcode.vcxproj", "{5C698F13-6E9F-46F3-95FC-55376A65D8BF}" EndProject Project("{2150E333-8FDC-42A3-9474-1A3956D46DE8}") = "Solution Items", "Solution Items", "{41BC2617-A896-4D63-9F5E-ED26C5A613B8}"     ProjectSection(SolutionItems) = preProject         LICENSE = LICENSE         readme.md = readme.md     EndProjectSection EndProject Project("{2150E333-8FDC-42A3-9474-1A3956D46DE8}") = "pcileech_kmd", "pcileech_kmd", "{2A4F90E3...