cve-2017-5753

CVE-2017-5753 CVE-2017-5753, Spectre, PoC, C, ASM for OSX, MAC, Intel Arch Compile: gcc -o a.out spectre.c Output: 0x41414141 Also added Control Flow output from Hopper.app for Visual Learners You can Adjust the junk size and get more reliable Reads Depending on CPU activity, Hits are lower when...

Hardware-Vulnerability-with-Proof-of-Concept-

🛡️ Spectre Variant 2 CVE-2017-5715 — Investigación de Vulnerabilidad de Hardware Un documento de investigación en profundidad y una Prueba de Concepto PoC práctica que explora ataques de ejecución especulativa en CPUs modernas. 📖 Resumen Este proyecto es una exploración de investigación y...

CVE-2018-3639-specter-v4-

CVE-2018-3639-specter-v4 spectre v4 : Speculative Store Bypass CVE-2018-3639 proof of concept for Linux build: gcc spectre-v4.cpp -o spectre run: ./spectre result: --------attack-------- low than threshold:155 low than threshold:144 low than threshold:133 low than threshold:0 low than threshold:1...

spectre-meltdown-checker

Spectre & Meltdown Checker A self-contained shell script to assess your system's resilience against the several transient execution CVEs that were published since early 2018, and give you guidance as to how to mitigate them. CVE list CVE| Name| Aliases ---|---|--- CVE-2017-5753| Bounds Check...

spectre-meltdown-checker

Spectre & Meltdown Checker Un script de shell autocontenido para evaluar la resistencia de su sistema contra las diversas vulnerabilidades de ejecución transitoria que se publicaron desde principios de 2018, y ofrecerle orientación sobre cómo mitigarlas. Lista de CVE CVE| Nombre| Alias ---|---|--...

CVE-2023-0045

Bypassing Spectre-BTI User Space Mitigations on Linux This is a working document, please send us feedback if you think we got something wrong or if we missed a citation Version 1.0 José Oliveira esoj Rodrigo Branco BSDaemon Introduction When testing the success rate of Spectre-BTI attacks, we...

CVE-2021-29155

This is the Proof Of Concept code for CVE-2021-29155. The range tracking system for pointer arithmetic in the speculative domain was insufficient. It was possible to extract kernel data via a sidechannel. This is a proof of concept you can read up to 0x5fff bytes out of bounds from the last eleme...

meltdown-spectre-bios-list

Meltdown/Spectre BIOS/Firmware Updates list This is a list of all products an manufacturers which patched BIOS/Firmware addressing the Meltdown and Spectre vulnerabilities If you have better info please send pull requests. Why I did this? to have a parseable list for all my hardware Check your...

exploit-cve-2017-5715

Spectre attack Spectre breaks the isolation between different applications. It allows an attacker to trick error-free programs, which follow best practices, into leaking their secrets. In fact, the safety checks of said best practices actually increase the attack surface and may make applications...

In-Spectre-Meltdown

In-Spectre-Meltdown Esta herramienta permite verificar los ataques de canal lateral de ejecución especulativa que afectan a muchos procesadores modernos y diseños de sistemas operativos. CVE-2017-5754 Meltdown y CVE-2017-5715 Spectre permiten que procesos no privilegiados roben secretos de proces...

btr

Branch Target Reuse BTR Artifacts This repository contains the artifacts for the paper "Branch Target Reuse: Practical Spectre-v2 Attacks in JIT Engines via Stale Branch Prediction Entries" accepted at ACM CCS 2026. For more information about the BTR attack, see our project-page and our paper! bt...

CiscoSpectreTakeover

CiscoSpectreTakeover A PoC chain exploit using the recent Cisco SMP exploit CVE-2017-6736 to chain into Spectre CVE-2017-5753 and CVE-2017-5715 Credits Cisco RCE Exploit submodule by artkond: https://github.com/artkond/cisco-snmp-rce JS Spectre Chrome POC by ascendr:...

CVE-2021-33624

Prueba de Concepto para CVE-2021-33624 compilar con gcc -pthread -o bpfspectretypeconfusion bpfspectretypeconfusion.c -Wall -ggdb -std=gnu99 ejecutar con sudo ./bpfspectretypeconfusion 1 2 ffffffffa4925620 0x10 donde 1 y 2 son hilos de CPU que se ejecutan en dos núcleos de hardware distintos,...

SpecuCheck

SpecuCheck SpecuCheck is a Windows utility for checking the state of the software and hardware mitigations against CVE-2017-5754 Meltdown, CVE-2017-5715 Spectre v2, CVE-2018-3260 Foreshadow, and CVE-2018-3639 Spectre v4. It uses two new information classes that were added to the...

CVE-2023-0045

Evadiendo las mitigaciones de Spectre-BTI en el espacio de usuario en Linux Este es un documento de trabajo, envíenos comentarios si cree que nos equivocamos en algo o si omitimos una cita Versión 1.0 José Oliveira esoj Rodrigo Branco BSDaemon Introducción Al probar la tasa de éxito de los ataque...

spectre-attack-example

Rutina de ataque Spectre 2 de enero de 2018 CVE-2017-5753 y CVE-2017-5715 Ejemplo de explotación de la vulnerabilidad "Spectre" ¿Qué es esto? Colocamos el texto "The Magic Words are Squeamish Ossifrage." en la memoria, y luego intentamos leerlo explotando la vulnerabilidad. Si el sistema es...

spectre-attack

Spectre Attack Example Example of using revealed "Spectre" exploit from 2 Jan 2018 CVE-2017-5753 and CVE-2017-5715 Spectre breaks the isolation between different applications. It allows an attacker to trick error-free programs, which follow best practices, into leaking their secrets. In fact, the...

Spectre-Vulnerability-CVE-2017-5753-

Spectre-Vulnerability-CVE-2017-5753- This repository contains a report on Specre vulnerability and details on exploiting vulnerability. The Proof of Concept used for this was reffered from https://github.com/Eugnis/spectre-attack GitHub repository. Originally, the code was from a report by Graz...

Spectre-PoC

Spectre-PoC Not By Me. Collected from Book. Spectre Attacks: Exploiting Speculative Execution...

arachni

Aviso Arachni se ha vuelto obsoleto, prueba su sucesor de próxima generación Ecsypno Spectre Scan! Arachni - Framework de Escáner de Seguridad de Aplicaciones Web Versión | 1.6.1.3 ---|--- Página principal | http://arachni-scanner.com Blog | http://arachni-scanner.com/blog Github |...