LiMEaide: Remotely Dump Linux RAM

LiMEaide is a python application intended to remotely dump RAM of a Linux users and make an instability profile for later examination on your neighborhood have. We hope that this will rearrange Linux computerized crime scene investigation in a remote situation. Keeping in mind the end goal to utilize LiMEaide you should simply nourish a remote Linux customer IP address, sit back, and expend your most loved charged refreshment.



How does it work?

  • Make a remote connection with specified client over SHH
  • Transfer necessary build files to the remote machine
  • Build the memory scrapping Loadable Kernel Module (LKM) LiME
  • LKM will dump RAM
  • Transfer RAM dump and RAM maps back to host
  • Build a Volatility profile


Dependencies

  • python3
  • paramiko
  • dwarfdump
  • LiME

LiME


In order to use LiME you must download and move the source into the LiMEaide/tools directory. Make sure the the LiME folder is named LiME. The full path should be as follows:

LiMEaide/tools/LiME/

How to:

  • Download LiME v1.7.8
  • Extract into LiMEaide/tools/
  • Rename folder to LiME

Source: www.ehacking.net
LiMEaide: Remotely Dump Linux RAM LiMEaide: Remotely Dump Linux RAM Reviewed by Anonymous on 12:00 AM Rating: 5