PCILeech by Ulf Frisk

The open-source foundation behind most DMA card "firmwares" used in the wild

What is PCILeech?

🧩

Open Source Project

PCILeech is an open-source project created by Ulf Frisk that enables Direct Memory Access (DMA) over PCIe devices to read and write host memory. It is primarily used for research, memory forensics, and security testing.

🧠

Core Components

The project includes firmware for supported FPGA boards, device bitstreams, and host-side tools capable of dumping, mapping, and manipulating system memory.

🔗

Official Links

GitHub: ufrisk/pcileech
Blog & resources

How PCILeech Works

FPGA/PCIe Device

PCILeech supports various FPGA-based PCIe platforms. The FPGA loads a bitstream that allows DMA transactions to the host memory space.

Memory Mapping

Using DMA, the device issues read/write requests directly to RAM. The host-side tool translates virtual addresses, resolves structures, and performs operations like dump, search, and patch.

Bypassing the OS

Because DMA operates below the operating system, traditional software protections and many anti-cheat mechanisms cannot intercept these transactions.

Legitimate Research Uses

PCILeech is widely used in security research, incident response, and memory forensics for legitimate analysis of system memory.

Ecosystem, Forks, and "Firmwares"

Observation

Many commercial or gray-market DMA/FPGA cards advertise custom or proprietary "firmware" for gaming purposes.

Reality

In practice, the vast majority of these offerings are forks or repackaged builds that ultimately rely on PCILeech as the foundational technology. They often add thin wrappers, configuration presets, or UI tools, but the core DMA capability derives from PCILeech.

Licensing & Attribution

Some sellers do not properly attribute the original project or disclose their reliance on PCILeech.

Best Practice

Respect open-source licenses, provide attribution, and use the technology for legitimate research and educational purposes.

Disclaimer

This page is for educational purposes only. While PCILeech enables powerful DMA-based research capabilities, using it (or derivatives) to cheat in games violates terms of service and may be illegal depending on jurisdiction.

If you want to learn, start with the official repository and documentation and avoid untrusted third-party binaries or "firmwares".