A 512-byte boot sector that dumps your RAM to a USB stick (github.com)
BareMetal-RAM-Dumper boots without an OS from a 512-byte sector, flips the x86 CPU into unreal mode to reach memory above 1MB, then writes physical RAM to a USB drive in 32KB chunks. The pitch: cold-boot forensics and crypto-key recovery.
It runs only on legacy BIOS, and the thread pokes holes fast. One asks what was actually tested; another notes UEFI firmware would clobber the RAM before the dumper ever runs.
Sign in to save