Skip to content

Device_FPGA

ufrisk edited this page Oct 14, 2019 · 21 revisions

Memory Acquisition Method: FPGA (Hardware)

The LeechCore library supports reading memory using PCILeech FPGA PCIe to USB hardware.

Facts in short:

  • Is supported on all supported platforms.
  • Acquires memory in read/write mode.
  • Acquired memory is assumed to be volatile.
  • Have additional requirements.

Connection string:

LeechCore API:

Please specify the acquisition device type (and optionally speed configuration options) LEECHCORE_CONFIG.szDevice when calling LeechCore_Open. The speed configuration options should ideally never be used and only exists for debugging purposes. Examples: FPGA FPGA://<pcie_gen_1_or_2>:[<read_delay_uS>[:<write_delay_uS>[:<probe_delay_uS>]]].

PCILeech / MemProcFS:

Please specify the device type in the -device option.

Examples:

-device FPGA

-device FPGA://2:300

-device FPGA://1:300:300:300


Requirements:

Requires the FPGA hardware which is connected to the target computer over PCIe and to the analysis computer over USB.

Windows: FTDI drivers have to be installed if FPGA is used on Windows. Download the 64-bit FTD3XX.dll from FTDI and place it alongside leechcore.dll.

Linux: Requires libusb (apt-get install libusb-1.0-0) and access to the usb device (permission change or run as root may be required) alternatively a Kernel Driver provided by LambdaConcept. LeechCore will automatically attempt to locate the kernel driver before using libusb.

Clone this wiki locally