Read the contents inside a RAM

In this post I will show you ,how you can see what is holding in your system RAM at the present moment.

Here is what you need to do :

bhaskar@GentooLinux_12:11:22_Mon Apr 23:~> sudo strings /dev/mem | less

And the outcome from my laptop is below:

ZRr=
`|f
\|f1
GRUB
Geom
Hard Disk
Read
Error
ZRr=
`|f
\|f1
GRUB
Geom
Hard Disk
Read
Error
loading
Geom
Read
Error
WVS1
[^_]
[^_]
>G9}
Ft51
D[^_]
[^_]
[^_]
Y_^+
RBRPQR
ZYs
(hd0,msdos2)/grub2
t)PS
USRf
fSfRQ
[_^]
UQPSVWR
_^[XY]
WVS1
[^_]
<,u; PAMS PAMSu [^_] [^_] [^_] u SSh, QQh< [^_] VVPh_ SSQht RRPh (<-t PWQh [^_] (<-t PQRh [^_] [^_] [^_] RPWh [^_] SSh/ PPhC PPhe t$QP [^_]Z [^_]Z s SSh% PPh6 [^_] [^_] (Ph] PPhn [^_] [_t3 [^_] [[t>
[^_]
[^_]
[^_]
4RPh
3w RRh
ELFu
PPh9
PPh\
PPhr
C09E
C09E
C09E
C09E
C09E
QPhY
t"RR
[^_]
[^_]
>PVWh
[^_]
[^_]
,[^_]
[^_]
RRhP
8(uB
PPh@
[^_]
RRhL
[^_]
>/t
[^_]
VVhq
[^_]
8+t 1
8+u< s VVh [^_] [^_] [^_] PPhP 8mimgu [^_] [^_]Z [^_] Y[^] WVSW ^[^_] ZY[^_] SWvP ^[^_] [^_] [^_] $[^_] [^_] u
Entering rescue mode...
grub_abort
grub_bios_interrupt
grub_boot_drive
grub_chainloader_real_boot
grub_checkkey
grub_command_list
grub_current_context
grub_device_close
grub_device_iterate
grub_device_open
grub_disk_ata_pass_through
grub_disk_close
grub_disk_dev_iterate
grub_disk_dev_register
grub_disk_dev_unregister
grub_disk_firmware_fini
grub_disk_firmware_is_tainted
grub_disk_get_size
grub_disk_open
grub_disk_read
grub_disk_write
grub_divmod64_full
grub_dl_get
grub_dl_head
grub_dl_load
grub_dl_load_file
grub_dl_ref
grub_dl_unload
grub_dl_unref
grub_env_export
grub_env_find
grub_env_get
grub_env_iterate
grub_env_set
grub_env_unset
grub_err_printed_errors
grub_errmsg
grub_errno
grub_error
grub_error_pop
grub_error_push
grub_exit
grub_fatal
grub_file_close
grub_file_read
grub_file_seek
grub_free
grub_fs_autoload_hook
grub_fs_list
grub_fs_probe
grub_get_rtc
grub_get_time_ms
grub_getkey
grub_gettext
grub_isprint
grub_isspace
grub_list_push
grub_list_remove
grub_machine_fini
grub_machine_mmap_iterate
grub_malloc
grub_memalign
grub_memcmp
grub_memmove
grub_memset
grub_millisleep
grub_mm_base
grub_module_iterate
grub_named_list_find
grub_parser_cmdline_state
grub_parser_split_cmdline
grub_partition_get_name
grub_partition_iterate
grub_partition_map_list
grub_partition_probe
grub_pit_wait
grub_print_error
grub_printf
grub_printf_
grub_prio_list_insert
grub_puts_
grub_pxe_call
grub_real_dprintf
grub_realloc
grub_reboot
grub_refresh
grub_register_command_prio
grub_register_variable_hook
grub_snprintf
grub_stpcpy
grub_strchr
grub_strcmp
grub_strcpy
grub_strdup
grub_strlen
grub_strncmp
grub_strncpy
grub_strndup
grub_strrchr
grub_strstr
grub_strtoul
grub_strtoull
grub_strword
grub_term_inputs
grub_term_inputs_disabled
grub_term_outputs
grub_term_outputs_disabled
grub_term_poll_usb
grub_unregister_command
grub_vprintf
grub_vsnprintf
grub_xasprintf
grub_xputs
grub_xvasprintf
grub_zalloc
memcpy
no gzip magic found
vga=791 is deprecated. Use set gfxpayload=1024x768x16,1024x768 before linux command instead.
no gzip magic found
Intel(R)Sandybridge Mobile Graphics Chipset Accelerated VGA BIOS
Intel Corporation
Intel(R)Sandybridge Mobile Graphics Controller
Hardware Version 0.0
A wHq}
s} K
!nr'
'Dj"f
w_{{
.}#
'8|+
|B&Y
f87N,
:N_>
3c#S?
;Q~P
%Iiil
:j )j#
npdZy
IU9#G
D*~1
x3&~
{JKK
( PT
0 5
8MJWP
133WH2
VESA
Intel(R)Sandybridge Mobile Graphics Chipset Accelerated VGA BIOS
Intel Corporation
Intel(R)Sandybridge Mobile Graphics Controller
Hardware Version 0.0
0 5
0 5
8MJWP
133WH2
WVS1
[^_]
[^_]
>G9}
Ft51
D[^_]
[^_]
[^_]
Y_^+
RBRPQR
ZYs
B>Sz~
,zD#i8
tX6p
.yn1
6lx3u
^Zm2
vXg{3
i[.b
uj!s
(ds&
O3L5
X 3vO
_iiZ
whvZ
qg?
mO''
y[hg4
wR;=
so_?
dOAj0X
zp}c\K~[
qRpd5
/o]`
D&X+
kfv[q
4t7M
.o#K &u
xn-9
aua*
]oS|(
8vzw
l[M(
@\!$
t,MEH
[NUe
iBi&
1.<& {I_6 (#lD .G;S ,ptl "(,B } 8+.O| Yo_g9m Pi&S C:9V `^[Ui ?cht xkpl !F{5 m UWw 6gK! ,- | ]-rB .Ywk t/{6 byX| jJ2& h*S& gOl".a {6_UE ru-L ^|xE, ^|oK :B:7 {0oR Ijg) 60Mq {/bn ey:h# x~mN n 5T4f }S+t Nen. x~+S& *HaY- TT8#B UJ;]h0 hnKd ] ?Y IU[~ A0K`D Sp"d HJ+~ 0$'%X 3]4@" I/Pl# 3\w^ ]W&@ u'ay 7kyn .xs6` A%Lxc BpUv gXJ,c U&L2OZ ~`8>Q_H
:WDH
f$S6
#q`E
nb%r
\;po
3i5~
|Vs-
T;t@
WN"K
HFcs
\U68
\A|?
|eI#
%Izg
3X1l
,lM;
|~4[8
#kO,*NgNt
Gd!o
D j"
^Fy!
\vz`
NfYBU
]gz1
\2g?
C@bi
T' Z52B
jtb{$p
fR{O_x
j>U`
~V/*A{k
.
.
.
.
$VBT SANDYBRIDGE-M d
BIOS_DATA_BLOCK
2098Intel(R)Sandybridge Mobile PCI Accelerated SVGA BIOS
Build Number: snm20980.dnq PC 14.34 12/22/2010 15:25:04
DECOMPILATION OR DISASSEMBLY PROHIBITED
Copyright (C) 2000-2003 Intel Corp. All Rights Reserved.
02468:<@BDFHJLPRTVXZ\ LFP_PanelNameLFP_PanelNameLFP_PanelNameLFP_PanelName 0@0p H?@0b 0@0p 0*x Q H?@0b @0 6 #@0 * q8-@X-6 0 5 LFP_PanelNameLFP_PanelNameLFP_PanelNameLFP_PanelNameLFP_PanelNameLFP_PanelNameLFP_PanelNameLFP_PanelNameLFP_PanelNameLFP_PanelNameLFP_PanelNameLFP_PanelNameLFP_PanelNameLFP_PanelNameLFP_PanelNameLFP_PanelName+a fPfVfWf t[VfP ZYf;F rwfVWR . . . . . Diskette Drive Internal HDD USB Storage Device CD/DVD/CD-RW Drive Modular Bay HDD Onboard NIC Unknown device BIOS Setup Diagnostics eSATA CPU 1 Intel Intel(R) Core(TM) i3-2310M CPU @ 2.10GHz To Be Filled By O.E.M. To Be Filled By O.E.M. To Be Filled By O.E.M. L1-Cache L2-Cache L3-Cache J1A1 PS2Mouse J1A1 Keyboard J2A2B Video J3A1 USB1 J3A1 USB2 J3A1 USB3 J5A1 J2B3 - CPU FAN J9E1 - SCAN MATRIX J9G1 - LPC SIDE BAND J2G1 - GFX VID . . . . DIMM_B BANK 2 Not Specified Not Specified Not Specified Not Specified vPro INTEL 0000 Dell Inc. 05/26/2011 Dell Inc. 0M516T .G2VKKP1.CN7016617J002I. To Be Filled By O.E.M. Dell Inc. Not Specified G2VKKP1 DELL2 OKP1 Dell Inc. Vostro 3350 Not Specified G2VKKP1 To be filled by O.E.M. 20110720 20110720 ATI Robson XT DIMM_A BANK 0 830B 35963CFC 0D111800 NT4GC64B8HB0NS-CG 110720 20110720 ptal ptalH ptalp ptal ptal pfr0 IFE$ $PMM G=fHf RSD PTR . . . . IBM COMPATIBLE IBM IS A TRADEMARK OF INTERNATIONAL BUSINESS MACHINES CORP. Dell System Vostro 3350 (C)1985-2009,American Megatrends, Inc.All Rights Reserved. $BV# A04$DEL R:EF8 !dhuS @t$j@ @((PP((PP,(-)*. AMIBIOS 080010 06/16/10(C)2010 American Megatrends, Inc. All Rights Reserved (C)2010 American Megatrends, Inc. 63-0100-000001-00101111-061610-Chipset 000-0-0000-00-00-0000-00-00-000 000-0-0000-00-00-0000-00-00-00-0 _TG_0AAAA000 AMIBIOS(C)2010 American Megatrends, Inc. BIOS Date: 05/26/11 10:52:20 Ver: 04.06.04 CCCC ???? <<<<

.... and many more...I have chopped out the rest for sake of brevity :-)

Hope this will help.

Cheers!
Bhaskar