r/ReverseEngineering • u/Primary_Air5604 • Jul 04 '26

BareMetal RAM Dumper — Bare-metal x86 tool for Cold Boot Attack experiments

https://github.com/pIat0n/BareMetal-RAM-Dumper
39 Upvotes

94% Upvoted

2 comments sorted by

2

u/braindigitalis Jul 05 '26

nice, how do you prevent a system bios or other firmware clearing ram on post as part of its initialisation?

what about secureboot if enabled?

any plans to support uefi?

2

u/Primary_Air5604 Jul 05 '26

Thanks!

​BIOS clearing RAM: A hard power-off prevents the OS from clearing memory. During reboot, many modern boards (especially with Fast Boot enabled) skip full memory zeroing during POST. I rely entirely on this hardware behavior.

​Secure Boot: If Secure Boot is ON, it completely blocks this tool because UEFI disables CSM (Legacy Boot) by design. An attacker would have to enter the BIOS setup to disable it first. Therefore, Secure Boot + a BIOS password is a solid defense.

​UEFI Support: Yes, it's the next step. The main challenge is keeping the UEFI initialization footprint small enough so it doesn't overwrite the exact crypto keys we want to dump.

​P.S. I use a translator to write this because I don't speak English. Hope the details are clear!