expel-intel

expel-intel This is the home of the Expel Intel Team. Here, we will share IOCs and other information that is either not suitable for fitting into other mediums or uniquely suitable for fitting in git repos. Stay safe, do good, be well, and have fun! This repository is for informational purposes...

CVE-2015-2291

CVE-2015-2291 1 IQVW32.sys before 1.3.1.0 and 2 IQVW64.sys before 1.3.1.0 in the Intel Ethernet diagnostics driver for Windows allows local users to cause a denial of service or possibly execute arbitrary code with kernel privileges via a crafted a 0x80862013, b 0x8086200B, c 0x8086200F, or d...

Intel-Linux-Processor-Microcode-Data-Files

Intel Processor Microcode Package for Linux About The Intel Processor Microcode Update MCU Package provides a mechanism to release updates for security advisories and functional issues, including errata. In addition, MCUs are responsible for starting the SGX enclave on processors that support the...

retdec

Warning The RetDec project is currently in a limited maintenance mode due to a lack of resources: Pull Requests are welcomed. They are reviewed with priority, if possible without delays. Issues are reacted on with delays up to one quarter. Issues are not actively solved unless they relate to a...

iGPU-Leak

CVE-2019-14615: The iGPU-Leak Vulnerability Wenjian He, Wei Zhang, Sharad Sinha and Sanjeev Das. iGPU Leak: An Information Leakage Vulnerability on Intel Integrated GPU. In Proceedings of the 25th Asia and South Pacific Design Automation Conference ASP-DAC'20. View PDF View Slides What happened? ...

threat-intel

threat-intel This repository contains IoCs related to Volexity public threat intelligence blog posts. Public blog posts related to these IoCs can be found on the Volexity website. In the past this repository was also used to store tools published by Volexity. These tools have now been moved into...

cve-2017-5753

CVE-2017-5753 CVE-2017-5753, Spectre, PoC, C, ASM for OSX, MAC, Intel Arch Compile: gcc -o a.out spectre.c Output: 0x41414141 Also added Control Flow output from Hopper.app for Visual Learners You can Adjust the junk size and get more reliable Reads Depending on CPU activity, Hits are lower when...

sgx-step

精密なエンクレーブ実行制御のための実用的な攻撃フレームワーク SGX-Stepは、Intel x86プロセッサ全般、特にIntel SGXプラットフォームにおけるサイドチャネル攻撃研究を促進するためのオープンソースフレームワークです。SGX-Stepは、敵対的なLinuxカーネルドライバと、ユーザ空間から完全に信頼できないページテーブルエントリやx86 APICタイマ割り込みを設定できる小さなユーザ空間オペレーティングシステムライブラリで構成されています。SGX-Stepは、私たち自身の研究だけでなく、独立した研究者にも活用され、最大の時間分解能（つまり、被害エンクレーブを すべての...

intel-me-research

Intel ME Firmware Reverse Engineering — Live CSME 16.x Analysis "Your computer has a secret second computer inside it. We found it, mapped it, and documented what's hiding in there." 🔥 TRY IT YOURSELF — HECI SPY 🔥 One Python script. Zero dependencies. Talk to your Intel Management Engine directly...

I-know-where-your-page-lives

I-know-where-your-page-lives I Know Where Your Page Lives: Derandomizing the latest Windows 10 Kernel - ZeroNights 2016 Requirements Intel Processor Haswell or newer Windows 10 x64 Usage Run ASLRSideChannelAttack.exe to get the PML4-Self-Ref entry C:\Users\qa\DesktopASLRSideChannelAttack.exe +...

jwt_tool

The JSON Web Token Toolkit v2 jwttool.py is a toolkit for validating, forging, scanning and tampering JWTs JSON Web Tokens. Its functionality includes: Checking the validity of a token Testing for known exploits: CVE-2015-2951 The alg=none signature-bypass vulnerability CVE-2016-10555 The RS/HS25...

xed

Intel® X86 编码器解码器 Intel® XED Doxygen API 手册与源码构建手册： https://intelxed.github.io Bug 反馈： https://github.com/intelxed/xed/issues/new 简化版 GITHUB 构建说明： git clone https://github.com/intelxed/xed.git xed git clone https://github.com/intelxed/mbuild.git mbuild cd xed ./mfile.py 然后从 obj 目录中获取...

dragondance

Dragon Dance What is that? Dragon Dance is a plugin for Ghidra to get visualize and manipulate the binary code coverage data. Coverage data can be imported from the multiple coverage sources. For now the plugin supports Dynamorio and Intel Pin binary instrumentation tools. Dynamorio has its own...

dsiem

Dsiem Dsiem is a security event correlation engine for ELK stack, allowing the platform to be used as a dedicated and full-featured SIEM system. Dsiem provides OSSIM-style correlation for normalized logs/events, perform lookup/query to threat intelligence and vulnerability information sources, an...

Pip-Intel

🌐PIP-INTEL - OSINT and Cyber Intelligence Tool🌐 Tested: Kali-Linux Pip-Intel is a powerful tool designed for OSINT Open Source Intelligence and cyber intelligence gathering activities. It consolidates various open-source tools into a single user-friendly interface simplifying the data collection...

malcom

Malcom - Malware Communication Analyzer Malcom is a tool designed to analyze a system's network communication using graphical representations of network traffic, and cross-reference them with known malware sources. This comes handy when analyzing how certain malware species try to communicate wit...

uefi-firmware-parser

UEFIファームウェアパーサー .. image:: https://travis-ci.org/theopolis/uefi-firmware-parser.svg?branch=master :target: https://travis-ci.org/theopolis/uefi-firmware-parser UEFIファームウェアパーサーは、UEFIファームウェアボリュームの解析、抽出、再作成を行うためのシンプルなモジュールとスクリプト群です。 BIOS、OptionROM、Intel ME、その他のフォーマット用の解析モジュールも含まれています。...

ogi

OpenGraph Intel OGI オープンソースのビジュアルリンク分析およびOSINTフレームワーク。 無料で自己ホスティング可能、コミュニティ主導。 機能 • スクリーンショット • クイックスタート • Docker • Transform Hub • アーキテクチャ • コントリビューション 注意: このプロジェクトは活発に進化しています。中核機能とテストカバレッジは確立されていますが、リリースごとにドキュメント、堅牢性、機能の充実を継続的に改善しています。コントリビューション、バグ報告、フィードバックを歓迎します。 機能 ビジュアルグラフ調査 —...

Intel-CVE-2015-2291

Intel-CVE-2015-2291 PoC exploit for CVE-2015-2291 Data-only attack to pop a system shell with the vulnerable intel driver. The code itselfs implements more "functionality" provided from the driver, like physical to virtual address translation, mapping physical memory This two combined = arbitrary...

Hypervisor-101-in-Rust

Hypervisor 101 in Rust The materials of the "Hypervisor 101 in Rust" class held at Global Cybersecurity Camp 2023 Singapore. This repository contains a fuzzing hypervisor for UEFI on Intel/AMD processors, lecture and hands-on exercise materials, and sample corpus and target files. Read the course...