memguard

MemGuard Enclave de software para almacenar información sensible en memoria. Este paquete intenta reducir la probabilidad de que datos sensibles queden expuestos mientras están en memoria. Su objetivo es ser compatible con los principales sistemas operativos y está escrito en Go puro...

sgx-step

Un marco práctico de ataque para el control preciso de la ejecución de enclaves SGX-Step es un marco de trabajo de código abierto para facilitar la investigación de ataques de canal lateral en procesadores Intel x86 en general y en plataformas Intel SGX en particular. SGX-Step consiste en un...

BrowserBox

BrowserBox by DOSAYGO Secure, modern Remote Browser Isolation RBI with a clientless experience 🔐 NEW in v18.0.1 — Passkey authentication on macOS: sign in to websites with real passkeys inside your remote browser. Passkeys are created and stored on your Mac's Secure Enclave and unlocked with Touc...

sgxray

SGXRay: Automating Vulnerability Detection for SGX Apps Intel SGX protects isolated application logic and sensitive data inside an enclave with hardware-based memory encryption. To use such hardware-based security mechanism requires a strict programming model on memory usage， with complex APIs in...

sgxray

SGXRay: Automatización de Detección de Vulnerabilidades para Aplicaciones SGX Intel SGX protege la lógica de aplicación aislada y los datos sensibles dentro de un enclave mediante cifrado de memoria basado en hardware. Para usar este mecanismo de seguridad basado en hardware, se requiere un model...

secretive

Secretive Secretive es una aplicación para proteger y gestionar claves SSH con el Enclave Seguro. ¿Por qué? Almacenamiento más seguro La configuración más común para las claves SSH es simplemente mantenerlas en el disco, protegidas por permisos adecuados. Esto está bien en la mayoría de los casos...

gpasskey

======== gpasskey .. image:: https://gitlab.com/renich/gpasskey/-/raw/master/assets/banner.svg :width: 100% :align: center :alt: gpasskey banner | .. image:: https://gitlab.com/renich/gpasskey/badges/master/pipeline.svg :target: https://gitlab.com/renich/gpasskey/-/commits/master :alt: pipeline...

v0ltpwn

V0LTpwn V0LTpwn CVE-2019-11157 es un ataque de fallo controlado por software en procesadores x86. Es el primer ataque que corrompe la integridad de los enclaves SGX. Descripción Todos los procesadores Intel recientes presentan una interfaz de software para controlar los voltajes del núcleo sin...

snapshot-demo

Demo de Ataque de Instantánea Esta es la demo original del Ataque de Instantánea Inesperado encontrado por nosotros. Gracias a Intel por el Aviso de Seguridad. Construir la demo Instalar Intel SGX SDK y Occlum En primer lugar, cualquiera que desee ejecutar la demo debe instalar Intel SGX SDK y...

ARES

ARES™ Autonomous Red Team Engagement & Continuous Security Validation Platform The open-core platform empowering enterprise red teams, MSSPs, and security operations centers to execute targeted offensive engagements, discover deterministic attack paths, and continuously validate defensive posture...

lCTT-Apple-Silicon--Resonance-Vulnerability-CVE-2024-23296

CTT-Apple-Silicon--Resonance-Vulnerability-CVE-2024-23296 Apple Silicon runs at frequencies that are golden ratio harmonics of 587 kHz: · Performance cores: 3.2 GHz = 587 kHz × 5451 ≈ φ⁸ × 1000 · Efficiency cores: 2.0 GHz = 587 kHz × 3407 ≈ φ⁷ × 1000 · Neural Engine: 11.0 GHz = 587 kHz × 18739 ≈...

CVE-2026-27597

CVE-2026-27597 - version Remote Code Execution Quick Usage root@kitploit: python3 exploit.py -t "C:\Path\To\Target" -o demo.zip --data-file payload.exe Exploitation Notes Severity: CRITICAL CVSS: 10.0 Impact: Confidentiality, Integrity, Availability Published: 2026-02-25 Technical Summary...

CVE-2026-22686

Enclave VM Sandbox Escape CTF Challenge Challenge: "Breaking the Walls" Difficulty: Hard Category: Source Code Review / Sandbox Escape Points: 500 Scenario You've discovered a mysterious sandboxed JavaScript execution environment...

CVE-2026-83501

Out-of-bounds read in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to disclose information locally...

CVE-2026-83498

Untrusted pointer dereference in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...

EUVD-2026-73921

Untrusted pointer dereference in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...

EUVD-2026-73920

Out-of-bounds read in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to disclose information locally...

CVE-2026-83501

CVE-2026-83501 is an out-of-bounds read vulnerability in Windows Virtualization-Based Security (VBS) Enclave that allows a local, authorized attacker (low privileges) to disclose information without user interaction. The CVSS 3.1 score is 5.5 (Medium) , with high confidentiality impact but no int...

CVE-2026-83498

CVE-2026-83498 affects the Windows Virtualization-Based Security (VBS) Enclave and is caused by an untrusted pointer dereference , allowing an authorized local attacker with low privileges to escalate privileges without user interaction. The vulnerability carries a CVSS 3.1 score of 7.8 (HIGH) wi...

Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...