how to get the ram dump image using qpst configuration

The resulting memory dump files would then be available under the attacker’s PC.

The problem is that in the vulnerable versions of the bootloader, such a crash would cause the bootloader to expose a serial-over-USB connection, which would allow an attacker to obtain a full memory dump of the device using tools such as QPST Configuration. Source: IBM X-Force Application Security Research Team No (Memory) Dumping panic (caller 0xf936964): generate test-panic However, we discovered that if the attacker issued the fastboot oem panic command via the fastboot USB interface, the bootloader would be forced to crash: The fastboot mode exposes a USB interface, which, on locked devices, must not allow any security-sensitive operation to be commanded. An attacker with ADB access can do this by issuing the adb reboot bootloader command. A physical attacker can do this by pressing the volume down button during device boot. The vulnerability and its exploitation are rather straightforward: The attacker reboots the phone into fastboot mode, which can be done without any authentication. Behind the Curtain of the Nexus 5X Vulnerability IBM disclosed this issue to Android a few months ago, and the Android Security Team recently acknowledged it was patched. Using such chargers requires the victim to authorize the charger once connected. A nonphysical attacker could gain ADB access by infecting an ADB-authorized developer’s PC with malware or by using malicious chargers targeting ADB-enabled devices. The vulnerability could have been exploited by physical or nonphysical attackers with Android Debug Bridge (ADB) access to the device. Fortunately, IBM is not aware of any exploitation attempts of this vulnerability. Clearly such an ability would have been very appealing to thieves. The vulnerability would have permitted an attacker to obtain a full memory dump of the Nexus 5X device, allowing sensitive information to be exfiltrated from the device without it being unlocked. The first nonvulnerable version is MHC19J (bootloader bhz10m), released in March 2016. The IBM X-Force Application Security Research Team recently discovered a previously undocumented vulnerability in older versions of Nexus 5X’s Android images (6.0 MDA89E through 6.0.1 MMB29V or bootloaders bhz10i/k).

How to get the ram dump image using qpst configuration