carmaa/inception

Health v2 · maintenance only

Flags: no_license

Adoption not part of the score

1602 stars · 196 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

Inception is a Python-based physical memory manipulation tool that exploits PCI-based DMA (over FireWire, Thunderbolt, ExpressCard, PC Card, and other PCI/PCIe interfaces) to gain read/write access to a target machine's RAM. It can patch OS code in memory, e.g., to bypass password authentication on unlocked or locked machines.

Use cases

• demonstrate FireWire/Thunderbolt DMA attacks against live machines
• bypass OS login password by patching memory over DMA
• security research on physical access attack vectors
• forensics and OPSEC awareness training on DMA threats
• test whether a machine is vulnerable to SBP-2 DMA exploits

When to choose

• you need a quick, scriptable DMA memory attack over FireWire/PCIe interfaces
• you are demonstrating physical-access attack risks for security education
• you are researching legacy DMA attack techniques on older hardware/OSes

When to avoid

• you need a maintained tool - the project is no longer under active development (use PCILeech instead)
• target runs modern OS X (>10.7.2) or Windows (>8.1) with locked screen, or VT-D/IOMMU enabled
• you lack physical access to a FireWire/Thunderbolt/PCIe port on the victim machine

Facets

cli-tool · maturity abandoned

security penetration-testing cryptography security penetration-testing hardware windows python cli dma-attacks firewire physical-memory pentest sbp-2 thunderbolt linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="carmaa/inception")