Didier Stevens

Monday 15 December 2014


Filed under: Forensics,Networking — Didier Stevens @ 10:20

Together with Xavier Mertens I proposed a Brucon 5×5 project. Our project was accepted, and we bought 23 Cisco routers to teach memory forensics on network devices.

21 routers are used for workshops, and 2 routers are online.

If you want to practice memory forensics with real Cisco IOS devices, go to http://router-forensics.net.


  1. Hi, I am looking for a way to create a memory dump on a Linksys 8300 router. I haven’t touched it yet – it’s in active use in a facility. I found that Cisco uses “write core”, but nothing on Linksys. Could be as simple as dd?

    Comment by Alina Stechyshyn — Wednesday 7 August 2019 @ 20:34

  2. Don’t think so.

    Comment by Didier Stevens — Wednesday 7 August 2019 @ 22:21

RSS feed for comments on this post. TrackBack URI

Leave a Reply (comments are moderated)

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s

This site uses Akismet to reduce spam. Learn how your comment data is processed.

Blog at WordPress.com.