@related : Memory RAM SWP SWAP Infect RootKit DDR PNY SoDimm USB BioS
sudo dd if=/dev/mem of=/tmp/mem dd: reading `/dev/mem': Operation not permitted 2056+0 records in 2056+0 records out 1052672 bytes (1.1 MB) copied, 0.0168236 s, 62.6 MB/s grep STRICT_DEVMEM /boot/config-$(uname -r) CONFIG_STRICT_DEVMEM=y cat /proc/meminfo MemTotal: 8121504 kB avail=$(expr 8 \* 1024 \* 1024 \* 1024) avail=$(expr 8121504 \* 1024) size=$(expr 4 \* 1024 \* 1024) start=$(expr $avail - $size) time sudo dd if=/dev/mem of=/tmp/mem bs=1 skip=$start lsusb Bus 001 Device 002: ID 1043:8006 iCreate Technologies Corp. Flash Disk 32-256 MB sudo fdisk -l /dev/sda Disk /dev/sda: 131 MB, 131604480 bytes 255 heads, 63 sectors/track, 16 cylinders Units = cylinders of 16065 * 512 = 8225280 bytes Device Boot Start End Blocks Id System /dev/sda1 1 17 136521 83 Linux