
CryKeX
Linux Memory Cryptographic Keys Extractor
cryptographydigital-forensicsencryption-decryption-tools+2
242

Linux Memory Cryptographic Keys Extractor

Ian Beer's exploit for CVE-2017-2370 (kernel memory r/w on iOS 10.2)

Live hunting of code injection techniques

This tool leverages the Process Forking technique using the RtlCreateProcessReflection API to clone the lsass.exe process. Once the clone is created,…