Category Archives: contest

Recovering TeamViewer (and other) Credentials from RAM with EditBox

Posted on by

I recently stumbled upon the TeamViewer-dumper-in-CPP project, which shows just how easy it is to recover TeamViewer IDs, passwords, and account information from a running TV instance by enumerating child windows (on a live machine). The method is based on sending a WM_GETTEXT message to the TV GUI controls that contain the credentials. In particular, we’re looking for the two fields under the " Continue reading Recovering TeamViewer (and other) Credentials from RAM with EditBox→

Acquiring Memor(ies) from 2014

Posted on by

2014 is extremely volatile. Any minute now, it will be gone. Thus, we wanted to take a minute and preserve some of the more exciting memories. Specifically, we wanted to summarize how the memory forensics field and Volatility community has progressed t… Continue reading Acquiring Memor(ies) from 2014→

Acquiring Memor(ies) from 2014

Posted on by

2014 is extremely volatile. Any minute now, it will be gone. Thus, we wanted to take a minute and preserve some of the more exciting memories. Specifically, we wanted to summarize how the memory forensics field and Volatility community has progressed t… Continue reading Acquiring Memor(ies) from 2014→

Announcing the 2014 Volatility Plugin Contest Results!

Posted on by

The competition this year was fierce! We received a total of nearly 30 plugins to the contest. Ranking the submissions was one of the hardest things we’ve had to do. Each plugin is unique in its own way and introduces a capability to open source memo… Continue reading Announcing the 2014 Volatility Plugin Contest Results!→

Announcing the 2014 Volatility Plugin Contest Results!

Posted on by

The competition this year was fierce! We received a total of nearly 30 plugins to the contest. Ranking the submissions was one of the hardest things we’ve had to do. Each plugin is unique in its own way and introduces a capability to open source memo… Continue reading Announcing the 2014 Volatility Plugin Contest Results!→