Skip to content
← LibraryTechnique entry
FW-DMA-ATTACKInitial Access

DMA Attack (PCILeech / Inception)

Plug a PCIe card / Thunderbolt device into a locked machine — DMA reads/writes RAM directly, unlocks Windows / Linux / macOS.

§ Where this technique fits

FW-DMA-ATTACK is catalogued under the Initial Access tactic of the offensive-security kill-chain. It appears in 0 approved dossiers in the registry, typically.