In a security assessment, the following statements were given:

Threat: Spoof a device and modify RAM to add program code and change data.

Skill: Simple training of a unskilled person

Since an unskilled person can perform the attack, I assume that the device to perform the attack is available on the market. So that's what I'm looking for:

  • Mini PCIe-Card
  • allowing to copy 512 MB RAM of the host device
  • transfer the data out of the device in any kind (e.g. wireless or by storing on a SD card and then removing the Mini PCIe card again)
  • cost < 500 €

Note: I'm not looking to cause a security breach, but rather the opposite: understanding the attack and performing security tests for my devices.

  • You're probably thinking of a DMA attack - the classic vector is firewire. May 10, 2016 at 7:03
  • @JourneymanGeek: yes, except that my device doesn't have Firewire. May 10, 2016 at 7:07


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Browse other questions tagged or ask your own question.