https://github.com/serialphotog/linux-memory-dumper
A POC tool for dumping the memory on a running Linux system.
https://github.com/serialphotog/linux-memory-dumper
forensics linux memory-forensics proof-of-concept
Last synced: 3 months ago
JSON representation
A POC tool for dumping the memory on a running Linux system.
- Host: GitHub
- URL: https://github.com/serialphotog/linux-memory-dumper
- Owner: serialphotog
- License: gpl-3.0
- Created: 2025-02-12T00:00:28.000Z (11 months ago)
- Default Branch: main
- Last Pushed: 2025-06-18T19:42:00.000Z (7 months ago)
- Last Synced: 2025-06-18T20:32:51.321Z (7 months ago)
- Topics: forensics, linux, memory-forensics, proof-of-concept
- Language: C
- Homepage:
- Size: 22.5 KB
- Stars: 0
- Watchers: 1
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# Linux Memory Dumper
This repository contains a proof-of-concept tool for dumping the system memory of a Linux system. This works by locating the physical RAM address ranges by processing `/proc/iomem` and associating with regions in `/proc/kcore`. There is currently a single command-line tool provided here:
1. `dumpmemory` - Dumps the physical RAM of the system to a file on disk:
```
dumpmemory
```
## Disclaimer
Note that this tool is nothing more than an experimental proof-of-concept. It has not been extensively tested and I make no guarantee about its accuracy or completeness.
## Building
```bash
make
```