{"guid":"d30b21b9-726d-4ceb-bc68-6858cd158e36","title":"Public FPGA based DMA Attacking","subtitle":null,"slug":"34c3-9111-public_fpga_based_dma_attacking","link":"https://fahrplan.events.ccc.de/congress/2017/Fahrplan/events/9111.html","description":"Most thought Direct Memory Access (DMA) attacks were a thing of the past after CPU vendors introduced IOMMUs and OS vendors blocked Firewire DMA. At least until the PCILeech direct memory access attack toolkit was presented a year ago and quickly became popular amongst red teamers and governments alike.\n\nA year later the situation has improved but some firmware and operating systems still remain vulnerable by default. The hardware used to perform the attacks was however limited both in capabilities and supply. FPGA support was introduced and made available to the public to overcome these problems. In this talk I will subvert kernels, defeat full disk encryption and spawn system shells - all by using affordable publically available FPGAs and open source software!","original_language":"eng","persons":["Ulf Frisk"],"tags":["34c3","9111","Hardware \u0026 Making"],"view_count":2034,"promoted":false,"date":"2017-12-30T00:00:00.000+01:00","release_date":"2017-12-31T01:00:00.000+01:00","updated_at":"2026-04-10T13:15:06.957+02:00","length":1886,"duration":1886,"thumb_url":"https://static.media.ccc.de/media/congress/2017/9111-hd.jpg","poster_url":"https://static.media.ccc.de/media/congress/2017/9111-hd_preview.jpg","timeline_url":"https://static.media.ccc.de/media/congress/2017/d30b21b9-726d-4ceb-bc68-6858cd158e36-timeline.jpg","thumbnails_url":"https://static.media.ccc.de/media/congress/2017/d30b21b9-726d-4ceb-bc68-6858cd158e36-thumbnails.vtt","frontend_link":"https://media.ccc.de/v/34c3-9111-public_fpga_based_dma_attacking","url":"https://api.media.ccc.de/public/events/d30b21b9-726d-4ceb-bc68-6858cd158e36","conference_title":"34C3: TUWAT","conference_url":"https://api.media.ccc.de/public/conferences/34c3","related":[{"event_id":4762,"event_guid":"b036385c-ec1a-44e5-ae48-af703ce9b5d3","weight":16},{"event_id":4763,"event_guid":"2ef3b60f-6e5c-4c23-a145-d263685ec13e","weight":34},{"event_id":4766,"event_guid":"19b7e5d7-bba7-46da-afbc-f16d43fe395f","weight":19},{"event_id":4767,"event_guid":"f2ca3661-30c8-476e-9d6b-920bb20b21eb","weight":17},{"event_id":4795,"event_guid":"722ce759-9cde-4e3b-8db5-5a97aa9673d9","weight":24},{"event_id":4800,"event_guid":"a9ebf7e3-abc5-49d9-8efe-316b3bc52902","weight":15},{"event_id":4817,"event_guid":"be19fbe3-e825-4e67-93f9-a6aeda2e31af","weight":54},{"event_id":4826,"event_guid":"16645200-2036-4a3c-a44d-a5ff44ac2991","weight":36},{"event_id":4833,"event_guid":"e1a60f7b-6a56-4dce-ab3a-c686fa940aa8","weight":19},{"event_id":4845,"event_guid":"c21cb389-aba3-4eaa-ba1f-76f966b1686e","weight":20},{"event_id":4855,"event_guid":"51b586be-500c-436e-b70c-fc433e65c4be","weight":21},{"event_id":4860,"event_guid":"f552b4b5-7446-4cc4-836b-0aa3639b994f","weight":22},{"event_id":4866,"event_guid":"117a52b4-f675-49dd-aafe-659c07b6bc9c","weight":33},{"event_id":4870,"event_guid":"2cb8f405-10be-40f5-ae95-579f024a0c84","weight":3},{"event_id":4876,"event_guid":"dec6a7e0-2651-4bb5-8300-977795e901ed","weight":15},{"event_id":4898,"event_guid":"8c303809-3c7c-4532-ab1e-c9a4e7c38245","weight":21},{"event_id":4909,"event_guid":"03ba9edb-1d3a-4774-9384-7548c0696df7","weight":27},{"event_id":4910,"event_guid":"264c9958-ba75-487e-b23f-703e837336de","weight":24},{"event_id":4924,"event_guid":"51b646f8-7afc-46be-8f77-50f7787c1f5d","weight":24},{"event_id":4926,"event_guid":"1e5e3f78-dfbe-4aeb-9565-73c395c9f8fc","weight":29},{"event_id":4929,"event_guid":"8e222759-cd6b-403b-8fe1-3517bf7d2802","weight":28},{"event_id":4930,"event_guid":"9a0efbf6-94d6-4c86-864c-caa1f3e929c7","weight":3},{"event_id":4931,"event_guid":"8720ee73-f47b-4594-bfab-26206c0d6cfc","weight":43}],"recordings":[{"size":null,"length":null,"mime_type":"application/x-subrip","language":"eng","filename":"DRAFT_34c3-9111-eng-deu-Public_FPGA_based_DMA_Attacking.en_DRAFT.srt","state":"todo","folder":"","high_quality":true,"width":null,"height":null,"updated_at":"2022-01-15T16:22:17.930+01:00","recording_url":"https://cdn.media.ccc.de/congress/2017/DRAFT_34c3-9111-eng-deu-Public_FPGA_based_DMA_Attacking.en_DRAFT.srt","url":"https://api.media.ccc.de/public/recordings/57295","event_url":"https://api.media.ccc.de/public/events/d30b21b9-726d-4ceb-bc68-6858cd158e36","conference_url":"https://api.media.ccc.de/public/conferences/34c3"},{"size":322,"length":1886,"mime_type":"video/mp4","language":"eng","filename":"34c3-9111-eng-Public_FPGA_based_DMA_Attacking.mp4","state":"new","folder":"h264-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2017-12-31T16:18:03.457+01:00","recording_url":"https://cdn.media.ccc.de/congress/2017/h264-hd/34c3-9111-eng-Public_FPGA_based_DMA_Attacking.mp4","url":"https://api.media.ccc.de/public/recordings/22217","event_url":"https://api.media.ccc.de/public/events/d30b21b9-726d-4ceb-bc68-6858cd158e36","conference_url":"https://api.media.ccc.de/public/conferences/34c3"},{"size":321,"length":1886,"mime_type":"video/mp4","language":"deu","filename":"34c3-9111-deu-Public_FPGA_based_DMA_Attacking.mp4","state":"new","folder":"h264-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2017-12-31T16:18:14.700+01:00","recording_url":"https://cdn.media.ccc.de/congress/2017/h264-hd/34c3-9111-deu-Public_FPGA_based_DMA_Attacking.mp4","url":"https://api.media.ccc.de/public/recordings/22218","event_url":"https://api.media.ccc.de/public/events/d30b21b9-726d-4ceb-bc68-6858cd158e36","conference_url":"https://api.media.ccc.de/public/conferences/34c3"},{"size":541,"length":1886,"mime_type":"video/mp4","language":"eng-deu","filename":"34c3-9111-eng-deu-Public_FPGA_based_DMA_Attacking_hd.mp4","state":"new","folder":"h264-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2017-12-31T16:18:29.751+01:00","recording_url":"https://cdn.media.ccc.de/congress/2017/h264-hd/34c3-9111-eng-deu-Public_FPGA_based_DMA_Attacking_hd.mp4","url":"https://api.media.ccc.de/public/recordings/22219","event_url":"https://api.media.ccc.de/public/events/d30b21b9-726d-4ceb-bc68-6858cd158e36","conference_url":"https://api.media.ccc.de/public/conferences/34c3"},{"size":250,"length":1886,"mime_type":"video/mp4","language":"eng-deu","filename":"34c3-9111-eng-deu-Public_FPGA_based_DMA_Attacking_hd-slides.mp4","state":"new","folder":"slides-h264-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2017-12-31T16:22:11.093+01:00","recording_url":"https://cdn.media.ccc.de/congress/2017/slides-h264-hd/34c3-9111-eng-deu-Public_FPGA_based_DMA_Attacking_hd-slides.mp4","url":"https://api.media.ccc.de/public/recordings/22220","event_url":"https://api.media.ccc.de/public/events/d30b21b9-726d-4ceb-bc68-6858cd158e36","conference_url":"https://api.media.ccc.de/public/conferences/34c3"},{"size":19,"length":1885,"mime_type":"audio/opus","language":"eng","filename":"34c3-9111-eng-Public_FPGA_based_DMA_Attacking.opus","state":"new","folder":"opus","high_quality":false,"width":0,"height":0,"updated_at":"2017-12-31T16:22:35.218+01:00","recording_url":"https://cdn.media.ccc.de/congress/2017/opus/34c3-9111-eng-Public_FPGA_based_DMA_Attacking.opus","url":"https://api.media.ccc.de/public/recordings/22221","event_url":"https://api.media.ccc.de/public/events/d30b21b9-726d-4ceb-bc68-6858cd158e36","conference_url":"https://api.media.ccc.de/public/conferences/34c3"},{"size":28,"length":1885,"mime_type":"audio/mpeg","language":"eng","filename":"34c3-9111-eng-Public_FPGA_based_DMA_Attacking.mp3","state":"new","folder":"mp3","high_quality":false,"width":0,"height":0,"updated_at":"2017-12-31T16:23:05.373+01:00","recording_url":"https://cdn.media.ccc.de/congress/2017/mp3/34c3-9111-eng-Public_FPGA_based_DMA_Attacking.mp3","url":"https://api.media.ccc.de/public/recordings/22222","event_url":"https://api.media.ccc.de/public/events/d30b21b9-726d-4ceb-bc68-6858cd158e36","conference_url":"https://api.media.ccc.de/public/conferences/34c3"},{"size":133,"length":1886,"mime_type":"video/mp4","language":"eng-deu","filename":"34c3-9111-eng-deu-Public_FPGA_based_DMA_Attacking_sd.mp4","state":"new","folder":"h264-sd","high_quality":false,"width":720,"height":576,"updated_at":"2018-01-01T12:49:39.372+01:00","recording_url":"https://cdn.media.ccc.de/congress/2017/h264-sd/34c3-9111-eng-deu-Public_FPGA_based_DMA_Attacking_sd.mp4","url":"https://api.media.ccc.de/public/recordings/22223","event_url":"https://api.media.ccc.de/public/events/d30b21b9-726d-4ceb-bc68-6858cd158e36","conference_url":"https://api.media.ccc.de/public/conferences/34c3"},{"size":527,"length":1886,"mime_type":"video/webm","language":"eng-deu","filename":"34c3-9111-eng-deu-Public_FPGA_based_DMA_Attacking_webm-sd.webm","state":"new","folder":"webm-sd","high_quality":false,"width":720,"height":576,"updated_at":"2018-01-01T12:50:21.544+01:00","recording_url":"https://cdn.media.ccc.de/congress/2017/webm-sd/34c3-9111-eng-deu-Public_FPGA_based_DMA_Attacking_webm-sd.webm","url":"https://api.media.ccc.de/public/recordings/22224","event_url":"https://api.media.ccc.de/public/events/d30b21b9-726d-4ceb-bc68-6858cd158e36","conference_url":"https://api.media.ccc.de/public/conferences/34c3"},{"size":633,"length":1886,"mime_type":"video/webm","language":"eng-deu","filename":"34c3-9111-eng-deu-Public_FPGA_based_DMA_Attacking_webm-hd.webm","state":"new","folder":"webm-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2018-01-01T12:51:03.177+01:00","recording_url":"https://cdn.media.ccc.de/congress/2017/webm-hd/34c3-9111-eng-deu-Public_FPGA_based_DMA_Attacking_webm-hd.webm","url":"https://api.media.ccc.de/public/recordings/22225","event_url":"https://api.media.ccc.de/public/events/d30b21b9-726d-4ceb-bc68-6858cd158e36","conference_url":"https://api.media.ccc.de/public/conferences/34c3"},{"size":49,"length":1886,"mime_type":"video/mp4","language":"eng","filename":"34c3-9111-eng-Public_FPGA_based_DMA_Attacking_sd-slides.mp4","state":"new","folder":"slides-h264-sd","high_quality":false,"width":720,"height":576,"updated_at":"2018-01-02T16:19:09.332+01:00","recording_url":"https://cdn.media.ccc.de/congress/2017/slides-h264-sd/34c3-9111-eng-Public_FPGA_based_DMA_Attacking_sd-slides.mp4","url":"https://api.media.ccc.de/public/recordings/22374","event_url":"https://api.media.ccc.de/public/events/d30b21b9-726d-4ceb-bc68-6858cd158e36","conference_url":"https://api.media.ccc.de/public/conferences/34c3"},{"size":2,"length":null,"mime_type":"application/pdf","language":"eng","filename":"34c3-9111-public_fpga_based_dma_attacking.pdf","state":"new","folder":"slides-pdf","high_quality":true,"width":null,"height":null,"updated_at":"2018-01-08T19:04:08.651+01:00","recording_url":"https://cdn.media.ccc.de/congress/2017/slides-pdf/34c3-9111-public_fpga_based_dma_attacking.pdf","url":"https://api.media.ccc.de/public/recordings/22478","event_url":"https://api.media.ccc.de/public/events/d30b21b9-726d-4ceb-bc68-6858cd158e36","conference_url":"https://api.media.ccc.de/public/conferences/34c3"}]}