chackd

chackd chackd is a daemon which randomize each second the kernel parameter tcpchallengeacklimit to prevent side channel attacks Introduction A shortly presented side-channel attack has given strong attention of the community 1 . For lots of servers or smartphone devices this attack considered...

next88

next88 - React Server Components RCE Scanner High-performance Go implementation for detecting React Server Components RCE vulnerabilities CVE-2025-55182 & CVE-2025-66478. Features 🚀 High Performance : Compiled Go binary with goroutine-based concurrency 🔍 Multiple Detection Methods : Safe...

CVE-2022-20866

RSA Key Checker for CVE-2022-20866 A vulnerability in the handling of RSA keys on devices running the Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software could allow an unauthenticated, remote attacker to retrieve the RSA private key. This vulnerability is due to a...

cve-2020-16012

This repo contains PoCs for CVE-2020-16012, a side channel vulnerability in the implementation of CanvasRenderingContext2D.drawImage in Firefox and Chromium. Read a writeup of this vulnerability on the Mozilla Attack & Defense blog. Inside benchmark is code for measuring the timing of the...

CVE-2023-1206-CVE-2025-40040-CVE-2024-49882

Combined Covert Channel: CVE-2023-1206 + CVE-2024-49882 Overview This project demonstrates a covert communication channel using two Linux kernel vulnerabilities: Component| CVE| Purpose ---|---|--- Sync Channel| CVE-2023-1206| Clock synchronization via IPv6 hash collision timing Data Channel|...

power_analysis

Power analysis attack over RSA Index Index Introduction Power Analysis Attacks RSA: A Short Introduction RSA Example Equipment Measuring Power: A Short Introduction Ohm's Law Kirchhoff's Voltage Law KVL Voltage Divider Shunt Resistor Example Power Measurement Fast Exponentiation Fast Exponentiati...

lvi-lfb-attack-poc

PoC for the LVI-LFB Control Flow Hijacking attack CVE-2020-0551 This repository holds the sources for the LVI-LFB Control Flow Hijacking attack PoC. Contents lvi-cfh-poc - hijack the control flow of another process via line-fill buffer spraying whitepaper Prerequisites 1. Visual Studio 2015 2. A...

duct

Pown Duct Essential tool for finding blind injection attacks using DNS side-channels. Credits This tool is part of secapps.com open-source initiative. root@kitploit: / | / | /\ | \ / | \ \ | / | / /\ \ |/// \| || |/ https://secapps.com NB : This tool is taking advantage of http://requestbin.net...

AVX-Side-Channel

AVX 기반 타이밍 부채널 — ASLR 탐지 저자: Byte Reaper 설명 AVX 메모리 로드 + RDTSCP 타이밍 및 선택적 SIGSEGV 탐지를 사용하여 ASLR 탐지를 시연하는 스크립트입니다. 요구 사항 : Linux x8664 -mavx2를 지원하는 GCC AVX2 및 RDTSCP를 지원하는 CPU 빌드 : root@kitploit: gcc -mavx2 -O2 file.c -o AVX-Side-Channel ./AVX-Side-Channel 빠른 출력 예시 빠른 접근 → ASLR not detected 느린 접근 ...

I-know-where-your-page-lives

I-know-where-your-page-lives I Know Where Your Page Lives: 最新の Windows 10 カーネルのランダム化解除 - ZeroNights 2016 必要条件 Intel プロセッサ Haswell 以降 Windows 10 x64 使用方法 ASLRSideChannelAttack.exe を実行して、PML4-Self-Ref エントリを取得します。 C:\Users\qa\DesktopASLRSideChannelAttack.exe + Setting thread affinity to CPU 0 +...

exploit-cve-2017-5715

Ataque Spectre Spectre rompe el aislamiento entre diferentes aplicaciones. Permite a un atacante engañar a programas sin errores, que siguen las mejores prácticas, para que filtren sus secretos. De hecho, las comprobaciones de seguridad de dichas mejores prácticas aumentan la superficie de ataque...

In-Spectre-Meltdown

In-Spectre-Meltdown Dieses Tool ermöglicht die Überprüfung von Angriffen auf die spekulative Ausführung Side-Channel-Angriffe, die viele moderne Prozessoren und Betriebssystemdesigns betreffen. CVE-2017-5754 Meltdown und CVE-2017-5715 Spectre ermöglichen unprivilegierten Prozessen, Geheimnisse vo...

CVE-2019-5489

CVE 2019-5489 本仓库包含针对Linux的页面缓存侧信道攻击（CVE-2019-5489）的概念验证代码。 为了评估页面缓存侧信道，我在两个进程之间实现了隐蔽信道 。 发送进程通过页面缓存侧信道向接收进程发送机密数据。 页面缓存攻击已在Linux内核5.0及更高版本中得到缓解，因此此PoC仅能在Linux内核5.0之前版本中起作用 。 注意：我在Ubuntu 18.04、Linux 4.15.0-70上测试通过。 构建 运行以下命令。 root@kitploit: git clone https://github.com/mmxsrup/CVE-2019-5489 cd...

pown

Pown Pown.js is a security testing and exploitation toolkit built on top of Node.js and NPM. Unlike traditional security tools, notably Metasploits, Pown.js considers frameworks to be an anti-pattern. Therefore, each feature in Pown is in fact a standalone NPM module allowing greater degree of...

XFLTReaT

XFLTReaT Questa è solo una delle tante cose che mancavano su Internet. Se sei stanco di provare diversi strumenti di tunnelling per ogni protocollo, questo deve essere il tuo strumento ^W framework. Se sei interessato ai dettagli, leggi la Wiki. Moduli disponibili TCP UDP ICMP SOCKS v4, 4a, 5 HTT...

scared

SCAred scared è un framework di analisi dei canali laterali mantenuto dal team di eShard. Per iniziare Requisiti Scared necessita di Python 3.11 , 3.12 o 3.13 e Numpy =2 Puoi installare scared, a seconda della tua configurazione: dal sorgente con pip con conda Installazione con conda Devi solo...

ssh-enum

ssh-enum Studio di convalida statistica di CVE-2016-6210 Una ri-indagine riproducibile dell'enumerazione degli username OpenSSH utilizzando l'analisi statistica. Questo progetto riesamina CVE-2016-6210 , un side-channel temporale documentato di OpenSSH, per determinare se rimane osservabile su un...

phywhispererusb

PhyWhisperer-USB Was ist das hier? Dies ist ein Hardware-Trigger für FI oder SCA, der auf dem USB-Phy auslöst. Lesen Sie unbedingt auch die Dokumentation unter http://phywhispererusb.readthedocs.io/! Wenn Sie gerade anfangen, gibt es einige Demonstrations-Notebooks, die zeigen, wie man: Daten...

CVE-2020-16012-PoC

Progetto M2 - Side Channel Attack Client Chrome Versione 83 Link di installazione https://commondatastorage.googleapis.com/chromium-browser-snapshots/index.html?prefix=Linuxx64/756066/ Comando di avvio root@kitploit: unzip Linux...chrome.zip cd chrome-linux/ ./chrome --disable-gpu...

cdf

CDF – fuzzing differenziale crittografico CDF è uno strumento per testare automaticamente la correttezza e la sicurezza del software crittografico. CDF può rilevare errori di implementazione, non conformità, perdite di canali laterali e così via. CDF implementa una combinazione di test unitari co...