meltdown
There are 2 repositories under meltdown topic.
speed47 / spectre-meltdown-checker
Reptar, Downfall, Zenbleed, ZombieLoad, RIDL, Fallout, Foreshadow, Spectre, Meltdown vulnerability/mitigation checker for Linux & BSD
Language:Shell 3809hackademix / noscript
The popular NoScript Security Suite browser extension.
Language:JavaScript 786nsacyber / Hardware-and-Firmware-Security-Guidance
Guidance for the Spectre, Meltdown, Speculative Store Bypass, Rogue System Register Read, Lazy FP State Restore, Bounds Check Bypass Store, TLBleed, and L1TF/Foreshadow vulnerabilities as well as general hardware and firmware security guidance. #nsacyber
Language:C 741ionescu007 / SpecuCheck
SpecuCheck is a Windows utility for checking the state of the software mitigations and hardware against CVE-2017-5754 (Meltdown), CVE-2017-5715 (Spectre v2), CVE-2018-3260 (Foreshadow), and CVE-2018-3639 (Spectre v4)
Language:C 562raphaelsc / Am-I-affected-by-Meltdown
Meltdown Exploit / Proof-of-concept / checks whether system is affected by Variant 3: rogue data cache load (CVE-2017-5754), a.k.a MELTDOWN.
Language:C++ 544mniip / spectre-meltdown-poc
A semi-demi-working proof of concept for a mix of spectre and meltdown vulnerabilities
Language:C 131microsoft / sca-fuzzer
Revizor - a fuzzer to search for microarchitectural leaks in CPUs
Language:Python 102Viralmaniar / In-Spectre-Meltdown
This tool allows to check speculative execution side-channel attacks that affect many modern processors and operating systems designs. CVE-2017-5754 (Meltdown) and CVE-2017-5715 (Spectre) allows unprivileged processes to steal secrets from privileged processes. These attacks present 3 different ways of attacking data protection measures on CPUs enabling attackers to read data they shouldn't be able to. This tool is originally based on Microsoft: https://support.microsoft.com/en-us/help/4073119/protect-against-speculative-execution-side-channel-vulnerabilities-in
Language:Python 95flxwu / spectre-attack-demo
Reproducing malicious memory reading on Intel i5 and Intel Xeon using a Spectre attack
Language:C 86codexlynx / hardware-attacks-state-of-the-art
Microarchitectural exploitation and other hardware attacks.
libtea / frameworks
Microarchitectural attack development frameworks for prototyping attacks in native code (C, C++, ASM) and in the browser
Language:C 57winter2020 / kleespectre
KLEESpectre is a symbolic execution engine with speculation semantic and cache modelling
Language:C 32oo7, a binary analysis tool to defend against Spectre vulnerabilities
Language:OCaml 30- Language:C++ 21
anuejn / meltdown-spectre-stickers
Stickers for labeling meltdown and spectre affected devices.
mathse / meltdown-spectre-bios-list
a list of BIOS/Firmware fixes adressing CVE-2017-5715, CVE-2017-5753, CVE-2017-5754
Language:Python 16vibrato / inspec-meltdownspectre
Inspec profile to test for the presence of the Meltdown/Spectre vulnerabilities
Language:Ruby 11berestovskyy / spectre-meltdown
Spectre-based Meltdown attack (i.e. 2-in1) proof of concept in 99 lines of code. For more details see 'The Spectre of Meltdowns' presentation:
Language:C 10- presentation_meltdown_spectre
neuhalje / presentation_meltdown_spectre
Meltdown and spectre explained -- for normal people
morning21 / Spectre_Meltdown_MDS_srcs
Collection of Spectre-type, Meltdown-type and MDS-type PoCs
feffi / docker-spectre
Spectre and Meltdown in a docker containerized test
Language:C 8joeywang4 / Transient-Weird-Machine
Microarchitectural weird machine implementation using exceptions, TSX, branch predictors, and branch target buffers.
Language:C 8github-3rr0r / TEApot
TEApot(Transient Execution Attack pot) is a project used to evaluate whether your system is affected by Meltdown and Spectre. My goal is to build a easy-to-use(hard to implement) and configurable transient attack test suite.
Language:C 7- Language:C 6
jarmouz / spectre_meltdown
Meltdown and Spectre : CPU vulnerabilities — Explained and Exploited
kianenigma / meltdown-spectre
Proof of Concept implementation + Brief Tutorial of the Meltdown and Spectre attacks [+ Flush/Realod]
Language:C 6gonoph / ansible-meltdown-spectre
Ansible Playbook to run the Red Hat spectre-meltdown check script
mukeshpilaniya / Meltdown-Attack
Meltdown exploits critical vulnerabilities in modern processors. These hardware vulnerabilities allow programs to steal data that is currently processed on the computer. Meltdown work on personal computers, mobile devices, and in the cloud. Depending on the cloud provider's infrastructure, it might be possible to steal data from other customers.
Language:Batchfile 4RPTU-EIS / SecureBOOM
Formally proven secure design of the RISC-V core BOOM (Berkeley Out-of-Order Machine) w.r.t. transient execution attacks (e.g., Meltdown and Spectre)
Language:Verilog 4- Language:Python 3
simeononsecurity / Windows-Spectre-Meltdown-Mitigation-Script
Simple script to implement protections against speculative execution side-channel vulnerabilities in Windows systems.
Language:PowerShell 3szilard / GBM-meltdown
The Effect of the Linux Kernel Page-Table Isolation (KPTI) Patch (Meltdown Vulnerability) on GBMs
Language:R 3b3b0 / GameBoyHorror
🕹️👻This fork of burntmacncheese's project checks your Windows workstation or server for it's vulnerability to Spectre / Meltdown. This version doesn't query Active Directory and is intended to work as a Configuration Baseline for SCCM 2012.
Language:PowerShell 2luke-jr / full-retpoline
Patches and such to build your entire system with retpolines
Language:Shell 2v-lavrentikov / meltdown-spectre
Project contains code that demonstrates how Meltdown and Spectre V1/V4 vulnerabilities work and shows the differences between them
Language:C 2
