elpscrk VS pcileech

Here is one. https://github.com/D4Vinci/elpscrk I haven't used it much because i am not mr alderson.

elpscrk on github

link

All PCIe devices have full DMA capabilities and can do whatever they want with main memory with no real recourse from software and there are several open source projects and examples that illustrate just how easy it would be for a company full of smart people such as Nvidia to develop something similar, especially because they're able to make the hardware to their own specifications.

Thanks for the very insightful info. I've never done it myself but I think it all has been done already: https://github.com/ufrisk/pcileech

Have a look at this: https://github.com/ufrisk/pcileech

* Unless you get an Evil Maid attack [0], like adding a physical keylogger to the keyboard bus.

If the device is decrypted but on lock screen (like with TPM) there are more options, the main one is reading memory via DMA [1] on an ExpressCard slot (eg the wifi card). Also swapping out the memory to do a cold boot attack [2] is possible.

[0] https://en.wikipedia.org/wiki/Evil_maid_attack

[1] https://github.com/ufrisk/pcileech

[2] https://en.wikipedia.org/wiki/Cold_boot_attack