Using a software exploit to image RAM on an embedded system

Digital Investigation

Volumn 6, Issue 3-4, 2010, Pages 95-103

  Rabaiotti, J R ^a   Hargreaves, C J ^a  

^a CRANFIELD UNIVERSITY   (United Kingdom)

Author keywords

Exploits; Games consoles; Live forensics; Memory imaging; Xbox

Indexed keywords

COPYRIGHTS; DATA ACQUISITION; IMAGING TECHNIQUES; SMARTPHONES;

BUFFER OVERFLOWS; COPYRIGHT INFRINGEMENT; COURT CASE; EMBEDDED DEVICE; EXPLOITS; LIVE FORENSICS; SOFTWARE AND HARDWARES; XBOX;

RANDOM ACCESS STORAGE;

EID: 77952104893     PISSN: 17422876     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.diin.2010.01.005     Document Type: Article

References (24)

1. AlephOne. Smashing the stack for fun and profit. Phrack 7 49 (1996). http://insecure.org/stf/smashstack.html [accessed 04.12.09]
2. BadServo. EXPLOITSTATION.Com FAQ. Web site (2005). http://www.exploitstation.com/index.php?page=faq [accessed 15 12 09]
3. Belvedere M. The gamecube "Phantasy Star Online" exploit. Club MyCE. Website (2004). http://club.myce.com/f98/gamecube-phantasy-star-online-exploit-94781/ [accessed 15.12.09]
4. Boileau A. Hit by a bus: physical access attacks with firewire. In: Presentation at Ruxcon; 2006.
5. Burke P.K., and Craiger P. Xbox forensics. Journal of Digital Forensic Practice 1 (2006) 275-282
6. Carrier B.D., and Grand J. A hardware-based memory acquisition procedure for digital investigations. Digital Investigation 1 (2004) 50-60
7. Collins D. XFT-a forensic analysis tool for the microsoft Xbox game console. In: Proceedings of the 6th annual security conference, April 11-12, 2007, Las Vegas, NV.
8. Free60 Project. Run code. Wiki page (2009). http://www.free60.org/Run_Code [accessed 06.01.10]
9. Free60 Project. SMC hack. Wiki page (2009). http://www.free60.org/JTAG_Hack [accessed 06.01.10]
10. Halderman JA, Schoen SD, Heninger N, Clarkson W, Paul W, Calandrino JA, et al. Lest we remember: cold boot attacks on encryption keys. In: 17th USENIX security symposium; 2008.
11. Huang A. Hacking the Xbox (2003), No Starch Press
12. Intel. Intel low pin count (LPC) interface specification, revision 1.1. Tech. Rep. (2002), Intel Corporation
13. Krawczyk H., Bellare M., and Canetti R. RFC 2104: keyed-hashing for message authentication. Tech. Rep (1997), Network Working Group. http://www.ietf.org/rfc/rfc2104.txt [accessed 07.12.09]
14. Kubasiak R.R., and Morrissey S. Mac OS X, iPod, and iPhone forensic analysis DVD toolkit. Ch. 15(Forensic Acquisition of an iPhone). Syngress (2009) 355-395
15. Robinson A. XBE file format 1.1. Tech. Rep., http://www.caustik.com/cxbx/download/xbe.htm; 2005 [accessed 15.12.09] - this page is undated, but the Xbox Linux Wiki page containing the same information (http://www.xbox-linux.org/wiki/XBE_File_Format) was first published on 13th July 2005.
16. Steil M. 17 Mistakes microsoft made in the Xbox security system. In: Proceedings of the 22nd chaos communication congress; 2005.
17. Steil M, Jilli D, Esser S, Lehner F, Mears J, Hucek E. Xbox software hacking. In: Presentation given at 20th chaos communications congress, http://sourceforge.net/projects/xbox-linux/files/Presentations/20thC%haosCommunicationCongress/20C3-Xbox_Software_Hacking.pdf/download; December 2003 [accessed 18.12.09].
18. Steil M, Pye D, et al, 2006. The Xbox linux project FAQ. Wiki article, http://www.xbox-linux.org/wiki/FAQ, page last updated 6th February 2006, [accessed 15.12.09].
19. Steil M, Pye D, et al, 2007. Software method HOWTO. Xbox Linux Wiki entry, http://www.xbox-linux.org/wiki/Software_Method_HOWTO, last updated 17th December 2007 [accessed 15.12.09].
20. Vaughan C. Xbox security issues and forensic recovery methodology (using Linux). Digital Investigation 1 (2004) 165-172
21. Wiibrew. Bannerbomb. Wiki page (2009). http://wiibrew.org/wiki/ Bannerbomb, [accessed 15.12.09]
22. Wiibrew. Indiana pwns. Wiki article (2009). http://wiibrew.org/wiki/Indiana_Pwns [accessed 15.12.09]
23. Wiibrew. Twilight hack. Wiki entry (2009). http://wiibrew.org/wiki/Twilight_Hack [accessed 15.12.09]
24. Xbox-Scene News. Krayzie Ndure installer v1.1. website posting (January 2006). http://www.xbox-scene.com/xbox1data/sep/EEFlyylEypnyXfkSdp.php [accessed 04.12.09]