cdf

CDF – crypto differential fuzzing CDF is a tool to automatically test the correctness and security of cryptographic software. CDF can detect implementation errors, compliance failures, side-channel leaks, and so on. CDF implements a combination of unit tests with "differential fuzzing", an approa...

cve-2017-5753

CVE-2017-5753 CVE-2017-5753, Spectre, PoC, C, ASM for OSX, MAC, Intel Arch Compile: gcc -o a.out spectre.c Output: 0x41414141 Also added Control Flow output from Hopper.app for Visual Learners You can Adjust the junk size and get more reliable Reads Depending on CPU activity, Hits are lower when...

duct

Pown Duct Essential tool for finding blind injection attacks using DNS side-channels. Credits This tool is part of secapps.com open-source initiative. root@kitploit: / | / | /\ | \ / | \ \ | / | / /\ \ |/// \| || |/ https://secapps.com NB : This tool is taking advantage of http://requestbin.net...

In-Spectre-Meltdown

In-Spectre-Meltdown This tool allows to check speculative execution side-channel attacks that affect many modern processors and operating systems designs. CVE-2017-5754 Meltdown and CVE-2017-5715 Spectre allows unprivileged processes to steal secrets from privileged processes. These attacks prese...

chackd

chackd chackd is a daemon which randomize each second the kernel parameter tcpchallengeacklimit to prevent side channel attacks Introduction A shortly presented side-channel attack has given strong attention of the community 1 . For lots of servers or smartphone devices this attack considered...

etherify

Etherify - ईथर को ईथरनेट में वापस लाना c 2020 Jacek Lipkowski SQ5BPF [email protected] 2020 RC3 सम्मेलन वार्ता: https://www.youtube.com/watch?v=7ek994-fwNE Etherify 1 और 2: https://lipkowski.com/etherify RPI 4 के साथ Etherify 3: https://lipkowski.com/etherify3/ बिना ईथरनेट केबल के Etherify 4...

SpecuCheck

SpecuCheck SpecuCheck is a Windows utility for checking the state of the software and hardware mitigations against CVE-2017-5754 Meltdown, CVE-2017-5715 Spectre v2, CVE-2018-3260 Foreshadow, and CVE-2018-3639 Spectre v4. It uses two new information classes that were added to the...

pown

Pown Pown.js is a security testing and exploitation toolkit built on top of Node.js and NPM. Unlike traditional security tools, notably Metasploits, Pown.js considers frameworks to be an anti-pattern. Therefore, each feature in Pown is in fact a standalone NPM module allowing greater degree of...

phywhispererusb

PhyWhisperer-USB What is this thing? This is a hardware trigger for FI or SCA, which triggers on the USB phy. Be sure to read the documentation at http://phywhispererusb.readthedocs.io/ as well! If you are getting started, there are a few demonstration notebooks showing how to: Sniff Data Stream...

CVE-2022-20866

RSA Key Checker for CVE-2022-20866 A vulnerability in the handling of RSA keys on devices running the Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software could allow an unauthenticated, remote attacker to retrieve the RSA private key. This vulnerability is due to a...

sgx-step

A Practical Attack Framework for Precise Enclave Execution Control SGX-Step is an open-source framework to facilitate side-channel attack research on Intel x86 processors in general and Intel SGX platforms in particular. SGX-Step consists of an adversarial Linux kernel driver and a small user-spa...

I-know-where-your-page-lives

I-know-where-your-page-lives أعرف أين تعيش صفحتك: إزالة العشوائية من نواة ويندوز 10 الأحدث - ZeroNights 2016 المتطلبات معالج إنتل Haswell أو أحدث Windows 10 x64 الاستخدام شغّل ASLRSideChannelAttack.exe للحصول على إدخال PML4-Self-Ref C:\Users\qa\DesktopASLRSideChannelAttack.exe + Setting thread...

react2shell-evolved

React2Shell Scanner High Fidelity Detection for RSC/Next.js RCE Scanner for detecting Remote Code Execution RCE vulnerabilities in React Server Components and Next.js applications. About React2Shell Scanner is a specialized tool for identifying Remote Code Execution RCE vulnerabilities in...

CVE-2020-16012-PoC

CVE-2020-16012 | Side Channel Attack This repository contains Proofs of Concept PoCs for CVE-2020-16012 , a side-channel vulnerability identified in the implementation of CanvasRenderingContext2D.drawImage in Firefox and Chromium. This project was conducted as a collaborative effort by a team of...

prefetch-tool

أداة Prefetch الخاصة بـ KASLR على Windows أداة إثبات مفهوم Proof-of-Concept لتجاوز KASLR kernel ASLR على نظام Windows 11. مستوحاة من EntryBleed الخاصة بنظام Linux. تم تطوير هذه الأداة كجزء من استغلال يستهدف Windows 11 24H2. أنا لست خبيرًا في القنوات الجانبية Side-channel على الإطلاق، لذا كان هذا...

CVE-2026-23006-Kyber-Ciphertext-Length-Side-Channel

CVE-2026-23006 – قناة جانبية لطول النص المشفر في Kyber كود البرنامج Python root@kitploit: kyberlengthleak.py - Leaks secret key bit based on ciphertext length import random Simulate encapsulation: ciphertext length depends on message bit def encapsulatepk, bit: In a flawed implementation, the...

next88

next88 - React Server Components RCE Scanner High-performance Go implementation for detecting React Server Components RCE vulnerabilities CVE-2025-55182 & CVE-2025-66478. Features 🚀 High Performance : Compiled Go binary with goroutine-based concurrency 🔍 Multiple Detection Methods : Safe...

CVE-2026-42167-Exploit

أداة استغلال CVE-2026-42167 الاحترافية أداة بحث أمني احترافية لاستغلال ثغرة CVE-2026-42167 في وحدة modsql الخاصة بـ ProFTPD. تقوم هذه الأداة بتنفيذ حقن SQL غير مصادق عليه لاستخراج ملفات حساسة من الخادم عبر هجمات القنوات الجانبية القائمة على الوقت. "ملاحظة: تعتمد كفاءة هذه الأداة على صلاحيات مستخد...

Linux Distros Unpatched Vulnerability : CVE-2026-84308

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - phpseclib is a PHP secure communications library. Prior to 3.0.57 and 4.0.1, pure-PHP X25519 scalar multiplication in phpseclib/Math/PrimeField/Integer.php...

mmiotic

mmiotic Un outil exploratoire pour le timing MMIO — mesurez n'importe quelle adresse physique et disséquez le matériel à partir de la latence. Étonnamment utile pour la rétro-ingénierie matérielle, l'empreinte des hyperviseurs, l'analyse par canaux auxiliaires de l'activité des périphériques, la...