exploit-cve-2017-5715

Spectre attack Spectre breaks the isolation between different applications. It allows an attacker to trick error-free programs, which follow best practices, into leaking their secrets. In fact, the safety checks of said best practices actually increase the attack surface and may make applications...

In-Spectre-Meltdown

In-Spectre-Meltdown This tool allows to check speculative execution side-channel attacks that affect many modern processors and operating systems designs. CVE-2017-5754 Meltdown and CVE-2017-5715 Spectre allows unprivileged processes to steal secrets from privileged processes. These attacks prese...

SpecuCheck

SpecuCheck SpecuCheck is a Windows utility for checking the state of the software and hardware mitigations against CVE-2017-5754 Meltdown, CVE-2017-5715 Spectre v2, CVE-2018-3260 Foreshadow, and CVE-2018-3639 Spectre v4. It uses two new information classes that were added to the...

CVE-2021-29155

Este es el código de Prueba de Concepto para CVE-2021-29155. El sistema de seguimiento de rango para la aritmética de punteros en el dominio especulativo era insuficiente. Era posible extraer datos del kernel a través de un canal lateral. Esta es una prueba de concepto con la que se pueden leer...

spectre-meltdown-checker

Spectre & Meltdown Checker Un script de shell autocontenido para evaluar la resistencia de su sistema contra las diversas vulnerabilidades de ejecución transitoria que se publicaron desde principios de 2018, y ofrecerle orientación sobre cómo mitigarlas. Lista de CVE...

spectre-meltdown-checker

Spectre & Meltdown Checker A self-contained shell script to assess your system's resilience against the several transient execution CVEs that were published since early 2018, and give you guidance as to how to mitigate them. CVE list...

CVE-2021-33624

Proof of Concept for CVE-2021-33624 compile with gcc -pthread -o bpfspectretypeconfusion bpfspectretypeconfusion.c -Wall -ggdb -std=gnu99 execute with sudo ./bpfspectretypeconfusion 1 2 ffffffffa4925620 0x10 where 1 and 2 are CPU threads which run on two distinct hardware cores, ffffffffa4925620 ...

CVE-2023-0045

Bypassing Spectre-BTI User Space Mitigations on Linux This is a working document, please send us feedback if you think we got something wrong or if we missed a citation Version 1.0 José Oliveira esoj Rodrigo Branco BSDaemon Introduction When testing the success rate of Spectre-BTI attacks, we...

cve-2017-5753

CVE-2017-5753 CVE-2017-5753, Spectre, PoC, C, ASM for OSX, MAC, Intel Arch Compile: gcc -o a.out spectre.c Output: 0x41414141 Also added Control Flow output from Hopper.app for Visual Learners You can Adjust the junk size and get more reliable Reads Depending on CPU activity, Hits are lower when...

CVE-2018-3639-specter-v4-

CVE-2018-3639-specter-v4 spectre v4 : Speculative Store Bypass CVE-2018-3639 proof of concept for Linux build: gcc spectre-v4.cpp -o spectre run: ./spectre result: --------attack-------- low than threshold:155 low than threshold:144 low than threshold:133 low than threshold:0 low than threshold:1...

Spectre-PoC

Spectre-PoC Not By Me. Collected from Book. Spectre Attacks: Exploiting Speculative Execution...

spectre-attack

Spectre Attack Example Example of using revealed "Spectre" exploit from 2 Jan 2018 CVE-2017-5753 and CVE-2017-5715 Spectre breaks the isolation between different applications. It allows an attacker to trick error-free programs, which follow best practices, into leaking their secrets. In fact, the...

CiscoSpectreTakeover

CiscoSpectreTakeover A PoC chain exploit using the recent Cisco SMP exploit CVE-2017-6736 to chain into Spectre CVE-2017-5753 and CVE-2017-5715 Credits Cisco RCE Exploit submodule by artkond: https://github.com/artkond/cisco-snmp-rce JS Spectre Chrome POC by ascendr:...

spectre-attack-demo

Spectre Attack Example Example of using revealed "Spectre" exploit from 2 Jan 2018 CVE-2017-5753 and CVE-2017-5715 Spectre breaks the isolation between different applications. It allows an attacker to trick error-free programs, which follow best practices, into leaking their secrets. In fact, the...

Hardware-Vulnerability-with-Proof-of-Concept-

🛡️ Spectre Variant 2 CVE-2017-5715 — Investigación de Vulnerabilidad de Hardware Un documento de investigación en profundidad y una Prueba de Concepto PoC práctica que explora ataques de ejecución especulativa en CPUs modernas. 📖 Resumen Este proyecto es una exploración de investigación y...

meltdown-spectre-bios-list

Meltdown/Spectre BIOS/Firmware Updates list This is a list of all products an manufacturers which patched BIOS/Firmware addressing the Meltdown and Spectre vulnerabilities If you have better info please send pull requests. Why I did this? to have a parseable list for all my hardware Check your...

CVE-2023-0045

Bypassing Spectre-BTI User Space Mitigations on Linux This is a working document, please send us feedback if you think we got something wrong or if we missed a citation Version 1.0 José Oliveira esoj Rodrigo Branco BSDaemon Introduction When testing the success rate of Spectre-BTI attacks, we...

spectre-attack-example

Spectre Attack Example January 2, 2018 CVE-2017-5753 and CVE-2017-5715 "Spectre" exploit example What is this? We place the text "The Magic Words are Squeamish Ossifrage." in memory, and then we attempt to read it using the vulnerability. If the system is vulnerable, you will see the same text on...

Spectre-Vulnerability-CVE-2017-5753-

Spectre-Vulnerability-CVE-2017-5753- This repository contains a report on Specre vulnerability and details on exploiting vulnerability. The Proof of Concept used for this was reffered from https://github.com/Eugnis/spectre-attack GitHub repository. Originally, the code was from a report by Graz...

arachni

Notice Arachni has become obsolete, try out its next-gen successor Ecsypno Spectre Scan! Arachni - Web Application Security Scanner Framework Synopsis Arachni is a feature-full, modular, high-performance Ruby framework aimed towards helping penetration testers and administrators evaluate the...