Skip to content

FreeBmAM ~ Free B-sd m-emory A-cquisition M-odule Tool/Kernel Module allows acquisition of all volatile memory from FreeBSD(and maybe BSD-style systems). Tested on FreeBSD 11.1 32-bit with RAM in multiples of 4096k. BSD Memory Acquisition. It only supports acquiring the memory dump to store as a file on disk. No userland interaction.

License

Notifications You must be signed in to change notification settings

mbhatt1/FreeBmAM

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

86 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

FreeBmAM ~ Free B-sd m-emory A-cquisition M-odule

Memory acquisition tool for FreeBSD (alpha). Took me a couple of months so please be nice :) Just creates a DD now.

Getting Started

Make sure you have the sources in the operating system available. Otherwise use svnlite to checkout.

After, to compile the kernel module, go to the folder and make.

$ awk -f <location of vnode.awk> <location of vnode.src> -h
$ make
$ cp FreeBmAM.ko /boot/kernel
$ kldload FreeBmAM.ko

#To Unload:
$ kldunload FreeBmAM.ko

This is an alpha software.

Prerequisites

Kernel source tree

Main Source Files:

module.c (Most of the logic)
subr_kernio.c (File IO from the kernel). 

Suggestions are welcome under Issues

Contributing

Please create an issue before a PR.

License

This project is licensed under the GNU License - see the LICENSE file for details

Acknowledgments

  • LiME
  • Linus Trovalds for inventing git
  • Joe Sylve, Irfan Ahmed, Vassil Roussev
  • Author of subr_kernio.c and kernio.h for providing the base code.

Please post any issues.

About

FreeBmAM ~ Free B-sd m-emory A-cquisition M-odule Tool/Kernel Module allows acquisition of all volatile memory from FreeBSD(and maybe BSD-style systems). Tested on FreeBSD 11.1 32-bit with RAM in multiples of 4096k. BSD Memory Acquisition. It only supports acquiring the memory dump to store as a file on disk. No userland interaction.

Resources

License

Stars

Watchers

Forks

Packages

No packages published