#1
|
||||
|
||||
Direct kernel memory access kernel extension
I recently made a kext that can completely dump out the kernel memory through a /dev/kmem device.
You can get the kernel extensions & the sources from: http://rapidshare.com/files/21853726...cess-1.0.1.zip I've used this for dumping out my BIOS ROM modules and so... This is the command I used to completely dump the kernel memory: Code:
sudo dd if=/dev/kmem of=test.bin iseek=638976 bs=1 An example of this can be found here: http://rapidshare.com/files/231432488/BIOS_ROMS.zip Enjoy and learn Credits go to Amit Singh (www.osxbook.com) and me... Last edited by andyvand; 05-10-2009 at 10:13 PM. |
|