suchitreddi / memorywipe

A tool for linux devices to securely wipe their storage and make sensitive data unrecoverable.

• Bonjour, I’m Suchit Reddi, an undergraduate student.
• Currently learning Cyber Security and French.
• Worked on a vulnerable PHP web application (Cyber Sentinel), Secure Storage Wiper, Intruder Capture System, and Voice Spoofing Detection.
• You can visit my website to know more about my work.
• My updated resume.

memorywipe's Issues

Creating a python version of the script

To make the script compatible with different operating systems other than linux, a python version of the tool is required.
os.system can be used to achieve this.

Incorrect input partition error

Let's say the target partition for an operation for example Cryptographic Erasure is /dev/sda1.
But because of some previous operation, this partition is already unmounted.

Let's say the user doesn't know how to give the partition and inputs sda1 when asked.

Expected behavior:
The user should be warned of this incorrect input, and result should be shown as unmounting failure.

Actual behavior:
It shows sda1 successfully unmounted.

Cause:
In the chk_unmount() function, the logic used for checking if a device is mounted:
if grep -qs "$partition" /proc/mounts; then
So, when sda1 is not present, it returns success.

Add a command line verification tool (PhotoRec / Scalpel)

Right now, verification is done by extracting images from the target device into another system running Autopsy.
Autopsy uses "scalpel" among other tools to retrieve data from the disk image.

I aim to add that command line version of the tool if possible so that verification can be done automatically on the device running memorywipe script.

Enhancing the script's working

Making the script more user friendly.
--> Introduce default options
--> Improve error handling
--> Automate as much as possible ...

Installation check failure

The logic used for checking existing installation does not work if the installation package name is not used as a primary command. For example, sg3-utils is the download package. But sg3-utils -v doesn't work, but sg_sanitize works. So, packages like this will fail this installation check.

This is a minor issue as it doesn't affect the actual sanitization process.