LinuxQuestions.org
Go Job Hunting at the LQ Job Marketplace
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices

Reply
 
Search this Thread
Old 07-10-2006, 01:00 PM   #1
SpinningCone
LQ Newbie
 
Registered: Jul 2006
Posts: 19

Rep: Reputation: 0
Memory Dump for cached passwords


ok ill try to be as concice as possible. i am currently testing some software to use an aladdin etoken and am researching how the token password is cached to see if theres any security risks.

in windows platform i found this sweet little program pmdump which will dump the memory of a process to a file i then use a program called strings to strip out the junk and look for plain text, easy.

i have already found my password in plain text on windows systems within the ie/firefox memory

i am trying to see if the same issue is present on linux i have a debian 3.1 and a fedora core 5 box set up for testing.

problem is i cant figure out how to dump the memory from firefox or if its even possible. some help with this would be appreciated.

oh fyi i am a total No0b on linux. i know just enough to get by so if you provide any help *please* spell it out for me
 
Old 07-10-2006, 01:20 PM   #2
macemoneta
Senior Member
 
Registered: Jan 2005
Location: Manalapan, NJ
Distribution: Fedora x86 and x86_64, Debian PPC and ARM, Android
Posts: 4,593
Blog Entries: 2

Rep: Reputation: 328Reputation: 328Reputation: 328Reputation: 328
The memgrep tool sounds like what you are looking for.
 
Old 07-11-2006, 10:06 AM   #3
SpinningCone
LQ Newbie
 
Registered: Jul 2006
Posts: 19

Original Poster
Rep: Reputation: 0
Thanks for the tip . memgrep seems to be what i need, now if only i could get it to work properly , having trouble with "make" im sure ill figure it out tho. thanks again
 
Old 07-11-2006, 02:28 PM   #4
xavier
LQ Newbie
 
Registered: May 2003
Posts: 2

Rep: Reputation: 0
Quote:
having trouble with "make" im sure ill figure it out tho.
do you have fix your problem?

I've a problem with make too
 
Old 07-11-2006, 02:49 PM   #5
macemoneta
Senior Member
 
Registered: Jan 2005
Location: Manalapan, NJ
Distribution: Fedora x86 and x86_64, Debian PPC and ARM, Android
Posts: 4,593
Blog Entries: 2

Rep: Reputation: 328Reputation: 328Reputation: 328Reputation: 328
If you are having problems with memgrep, it may no longer be compatible with your software releases. You can try memfetch instead. It's not as useful (it dumps the process memory to files, which you can then browse/search with a hex editor), but it works on the latest kernel.

Last edited by macemoneta; 07-11-2006 at 02:50 PM.
 
Old 07-12-2006, 10:27 AM   #6
SpinningCone
LQ Newbie
 
Registered: Jul 2006
Posts: 19

Original Poster
Rep: Reputation: 0
no i havent fixed the problem yet. i have actualy switched focus back to windows to make better use of my time. the linux/mac issue is not as important and overall i suspect the browsers do the same thing. i will give memfetch a try tho. just fyi the make problem i have is i get errors with several functions that are undeclared.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Increasing the amount of cached memory balteo Linux - General 1 09-16-2005 05:06 PM
Sync MySQL passwords with local account passwords? turbine216 Linux - Software 2 02-18-2005 04:15 AM
How to forcely dump the history of user commands to the admin dump file. mcp_achindra Linux - Security 1 03-19-2004 01:04 PM
core.2200 888.0 memory dump - file just appeared in my home directory Lakota Linux - Newbie 2 10-06-2003 10:25 AM
Is there a way to sync Samba passwords with linux user passwords MarleyGPN Linux - Networking 2 09-09-2003 11:59 AM


All times are GMT -5. The time now is 04:55 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration