-
Notifications
You must be signed in to change notification settings - Fork 177
Device_FPGA
The LeechCore library supports reading memory using PCILeech FPGA PCIe to USB hardware.
Facts in short:
- Is supported on all supported platforms.
- Acquires memory in read/write mode.
- Acquired memory is assumed to be volatile.
- Have additional requirements.
LeechCore API:
Please specify the acquisition device type (and optionally speed configuration options) LEECHCORE_CONFIG.szDevice when calling LeechCore_Open. The speed configuration options should ideally never be used and only exists for debugging purposes. Examples:
FPGA
FPGA://<pcie_gen_1_or_2>:[<read_delay_uS>[:<write_delay_uS>[:<probe_delay_uS>]]].
PCILeech / MemProcFS:
Please specify the device type in the -device option.
Examples:
-device FPGA
-device FPGA://2:300
-device FPGA://1:300:300:300
Requires the FPGA hardware which is connected to the target computer over PCIe and to the analysis computer over USB.
Windows: FTDI drivers have to be installed if FPGA is used on Windows. Download the 64-bit FTD3XX.dll from FTDI and place it alongside leechcore.dll.
Linux: Requires libusb (apt-get install libusb-1.0-0) and access to the usb device (permission change or run as root may be required) alternatively a Kernel Driver provided by LambdaConcept. LeechCore will automatically attempt to locate the kernel driver before using libusb.