My dumper is user-space only. It basically reads /dev/mem which is a device representing the machine's physical memory.
Thanks for the good work evaldas and cyph!
I'm a little confused about cyph's dumper. Does that do the same thing in userspace as evaldas' kerner module dumper? Or is evaldas' kernel module needed also for cyph's dumper?
And, evaldas; do you think it would be ok to share the source of your dumper? I'd be very grateful, because I'd really like to see how you've done this.
My dumper is user-space only. It basically reads /dev/mem which is a device representing the machine's physical memory.