phywhispererusb

PhyWhisperer-USB What is this thing? This is a hardware trigger for FI or SCA, which triggers on the USB phy. Be sure to read the documentation at http://phywhispererusb.readthedocs.io/ as well! If you are getting started, there are a few demonstration notebooks showing how to: Sniff Data Stream...

scared

SCAred scared는 eShard 팀이 유지 관리하는 부채널 분석 프레임워크입니다. 시작하기 요구 사항 Scared는 Python 3.11 , 3.12 또는 3.13 과 Numpy =2가 필요합니다. 설정에 따라 scared를 설치할 수 있습니다: 소스에서 pip 사용 conda 사용 conda로 설치 다음 명령을 실행하면 됩니다: root@kitploit: conda install -c eshard scared pip로 설치 Python wheel은 PyPI에서 사용할 수 있습니다. 다음을 실행하세요:...

mmiotic

mmiotic MMIO タイミングを探索するためのツール — 任意の物理アドレスを計時し、レイテンシからハードウェアを解析します。 ハードウェアリバースエンジニアリング、ハイパーバイザーのフィンガープリンティング、デバイスアクティビティのサイドチャネル解析、レジスタ特性評価、悪意あるトリガーの校正、そして冗長極まりないマシン命令の作成に、驚くほど役立ちます。 例 メモリ範囲のリバースエンジニアリング 物理メモリの最初の 1 メガバイトは、その構造が既によく知られているにもかかわらず、始めるのに手頃な例です。...

Power Side-Channel Analysis of the CVA6 RISC-V Core at the RTL Level Using VeriSide

Security in modern RISC-V processors demands more than functional correctness: It requires resilience to side-channel attacks. This paper evaluates the vulnerability of the side channel of the CVA6 RISC-V core by analyzing software-based AES encryption uses an RTL-level power profiling framework...

CVE-2025-63094: Exposure of Sensitive Information to an Unauthorized Actor

XiangShan Nanhu V2 and XiangShan Kunmighu V3 were discovered to use speculative execution and indirect branch prediction, allowing attackers to access sensitive information via side-channel analysis of the data cache...

EUVD-2018-15474

Malware in sbrugna...

EUVD-2020-6057

Malware in sbrugna...

EUVD-2020-12334

Malware in sbrugna...

EUVD-2018-15547

Malware in sbrugna...

EUVD-2018-15469

Malware in sbrugna...

EUVD-2018-3837

Malware in sbrugna...

EUVD-2022-43800

Malicious code in bioql PyPI...

EUVD-2022-30857

Malicious code in bioql PyPI...

Transformers for Secure Hardware Systems: Applications, Challenges, and Outlook

The rise of hardware-level security threats, such as side-channel attacks, hardware Trojans, and firmware vulnerabilities, demands advanced detection mechanisms that are more intelligent and adaptive. Traditional methods often fall short in addressing the complexity and evasiveness of modern...

CVE-2022-26296

BOOM: The Berkeley Out-of-Order RISC-V Processor commit d77c2c3 was discovered to allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis...

CVE-2022-46487

Improper initialization of x87 and SSE floating-point configuration registers in the sconeentry component of SCONE before 5.8.0 for Intel SGX allows a local attacker to compromise the execution integrity of floating-point operations in an enclave or access sensitive information via side-channel...

Linux Distros Unpatched Vulnerability : CVE-2020-13844

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Arm Armv8-A core implementations utilizing speculative execution past unconditional changes in control flow may allow unauthorized disclosure of information to ...

Linux Distros Unpatched Vulnerability : CVE-2018-3639

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known...

CVE-2022-40525

Information disclosure in Linux Networking Firmware due to unauthorized information leak during side channel analysis...

CentOS 7 : kernel-alt (RHSA-2020:0174)

The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:0174 advisory. - In the Linux kernel through 4.19, a use-after-free can occur due to a race condition between fanoutadd from setsockopt and bind on an AFPACKET socket...