{"id":13738869,"url":"https://github.com/NateBrune/fmem","last_synced_at":"2025-05-08T18:31:08.841Z","repository":{"id":33553185,"uuid":"37199387","full_name":"NateBrune/fmem","owner":"NateBrune","description":"Linux Kernel Module designed to help analyze volatile memory in the linux kernel","archived":false,"fork":false,"pushed_at":"2024-02-23T18:37:28.000Z","size":31,"stargazers_count":115,"open_issues_count":3,"forks_count":37,"subscribers_count":7,"default_branch":"master","last_synced_at":"2024-11-15T08:43:17.534Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"C","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"gpl-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/NateBrune.png","metadata":{"files":{"readme":"README","changelog":"ChangeLog","contributing":null,"funding":null,"license":"COPYING","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS","dei":null}},"created_at":"2015-06-10T13:40:20.000Z","updated_at":"2024-10-27T12:26:59.000Z","dependencies_parsed_at":"2024-04-17T03:06:06.658Z","dependency_job_id":"17fd4cd3-dcdf-42d0-ba6b-ec97bcc86aff","html_url":"https://github.com/NateBrune/fmem","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/NateBrune%2Ffmem","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/NateBrune%2Ffmem/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/NateBrune%2Ffmem/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/NateBrune%2Ffmem/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/NateBrune","download_url":"https://codeload.github.com/NateBrune/fmem/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":253127004,"owners_count":21858172,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-08-03T04:00:18.639Z","updated_at":"2025-05-08T18:31:08.471Z","avatar_url":"https://github.com/NateBrune.png","language":"C","funding_links":[],"categories":["Tool"],"sub_categories":["Memory Acquisition"],"readme":"fmem 1.6.0\n\nThis repo is was originally a github mirror of the original fmem module.\nLater this repo became a maintained version of fmem to account for a changing Linux kernel.\nBug reports and patches welcome.\n\nThis module creates /dev/fmem device,\nthat can be used for dumping physical memory,\nwithout limits of /dev/mem (1MB/1GB, depending on distribution)\n  \nTested on i386 and x64, feel free to test it on \ndifferent architectures. (and send report please)\n \nCloned from linux/drivers/char/mem.c \n(so GPL license apply)\n\nOriginal name of this tool was fdump, \nwhich was conflict with already existing tool,\nso name was changed to fmem  \n\n2009,2010 niekt0@hysteria.sk\n\n-----\nUsage:\n\n$ make\n\n# ./run.sh\n\n# dd if=/dev/fmem of=... bs=1MB count=... \n\n-----\nBUGS: if you do something like # dd if=/dev/fmem of=dump \n      dd will never stop, even if there is no more physical RAM\n      on the system. This is more a feature, because Linux kernel\n      don't have stable API, and detection of mapped areas can be \n      tricky on older kernels. Because primary usage for fmem is \n      memory forensic, I think it is safer to specify \n      amount of RAM by hand.\n-----\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2FNateBrune%2Ffmem","html_url":"https://awesome.ecosyste.ms/projects/github.com%2FNateBrune%2Ffmem","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2FNateBrune%2Ffmem/lists"}