Memory Dump for cached passwords
 

ok ill try to be as concice as possible. i am currently testing some software to use an aladdin etoken and am researching how the token password is cached to see if theres any security risks.

in windows platform i found this sweet little program pmdump which will dump the memory of a process to a file i then use a program called strings to strip out the junk and look for plain text, easy.

i have already found my password in plain text on windows systems within the ie/firefox memory

i am trying to see if the same issue is present on linux i have a debian 3.1 and a fedora core 5 box set up for testing.

problem is i cant figure out how to dump the memory from firefox or if its even possible. some help with this would be appreciated.

oh fyi i am a total No0b on linux. i know just enough to get by so if you provide any help *please* spell it out for me

The memgrep tool sounds like what you are looking for.

Thanks for the tip . memgrep seems to be what i need, now if only i could get it to work properly :rolleyes: , having trouble with "make" im sure ill figure it out tho. thanks again

do you have fix your problem?

I've a problem with make too :(

If you are having problems with memgrep, it may no longer be compatible with your software releases. You can try memfetch instead. It's not as useful (it dumps the process memory to files, which you can then browse/search with a hex editor), but it works on the latest kernel.

no i havent fixed the problem yet. i have actualy switched focus back to windows to make better use of my time. the linux/mac issue is not as important and overall i suspect the browsers do the same thing. i will give memfetch a try tho. just fyi the make problem i have is i get errors with several functions that are undeclared.