Re: Accessing the Swap

["the.soylent" <the.soylent () gmail com>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1




hi
strings /dev/<<swap-partition-here>> >dump.txt (as root)
should do the job...
as Andrew Haninger said, you can also use cat instead of strings..but.. ;)
for searching you may pipe it like
strings /dev/<<swap-partition-here>> |grep whatilookfor

greetz soylent


Andrew Haninger schrieb:
> On 5/2/06, Norbert François <norbertlike () gmail com> wrote:
>
> > I've a discussion with a friend of mine about Swap encryption.Now I'd
> > like to do a sort of "proof of concept", retrieving some "dangerous"
> > informations in the swap... My problem is that I don't know how to
> > access this part of the HD-memory :S... Can you help me ?
>
> I can't help you, but I think that those who can will need to know
> what OS you're using.
>
> In Linux, I *think* you could just cat your swap partition to a file
> and read it that way.
>
> HTH.
>
> -Andy


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFEW2GQY86qEhC92cgRAn2WAJ9Ks54vsX1rgqpKUUfl2rlwixfX6gCfRSR8
fvGc8IieE8an0egMNUCrlgo=
=Lign
-----END PGP SIGNATURE-----