Collaborate Disseminate
They are a different set of storage units used to express/measure file sizes. On the surface, Kibibytes, Mebibytes, and Gibibytes might seem similar to Kilobytes Gigabytes, Terabytes, Petabytes and Exabytes – and often used interchangeably – but they a… Continue reading What are Kibibytes (KiB), Mebibytes (MiB), and Gibibytes (GiB)?
Hard Faults are an accepted component of how contemporary computers analyze storage-related information. In cases where a memory block is obtained from the Page File (Virtual Memory) rather than the physical memory (RAM), a hard fault occurs. As a resu… Continue reading What is Hard Faults Per Second and How do you reduce them?
As I understood it (probably incorrectly) when a no-PIE binary gets loaded into memory it always has the same absolute base address.
This doesn’t make sense to me. Consider the exact same program compiled twice with PIE disabled:
gcc -no-p… Continue reading How can two identical no-PIE binaries run simultaneously?
I have created a memory dump of a Windows 7 VM and I am trying to find the password hint of the user and then decode it as this answer implies in a similar question: Is there a way to get Windows login password hint from SAM hive with vola… Continue reading How to read "HKLM\SAM\SAM\Domains\Account\Users<userkey>\UserPasswordHint" from a Windows 7 memory dump with Volatility?
My current understanding is that the user does not have any way of knowing the kernel address space layout due to the protection mechanisms such as Kernel Address Space Layout Randomization (KASLR).
However, I see that if I use cat /proc/i… Continue reading Can I know kernel address layout and memory mapped IO layout from the user privilege in linux kernel?
Scientists investigating the potential of a non-invasive laser therapy to improve cognitive function have produced some promising early results. There are important questions still to answer, but the team demonstrated an ability to boost short-term mem… Continue reading Experimental laser therapy offers boost to short-term memory
Can Cuckoo extract PE files from a memory dump or record the import table of the running process? I need to record the import table in PE not the called/executed API from the process.
There is Process-Dump which is able to extract PE from … Continue reading Cuckoo dump a PE file from a memory dump?
I read "Data Remanence in Semiconductor Devices" by Peter Gutmann, in which it is stated that it is possible to reconstruct the content of an erased SRAM based on changes of properties of the memory cells (thresholds, times).
Doe… Continue reading Data remanence – DDR2
In this post, we will show you how to find RAM Serial Number and all related information in Windows 11/10 using the command line or a free tool. Using the WMIC command line tool you can find the RAM serial number, part number, capacity, manufacturer, s… Continue reading How to find RAM Serial Number, RAM type, etc. in Windows 11/10
I have done a lot of research on this topic but am still missing this key information.
What security mechanism is implemented to make sure the private key is not stored verbatim in memory? I assume it has to do with some salt or struct to … Continue reading How are private keys stored in memory for OpenSSL since Heartbleed?