Docs and resources on CPU Speculative Execution bugs
☆376Jan 28, 2018Updated 8 years ago
Alternatives and similar repositories for speculation-bugs
Users that are interested in speculation-bugs are comparing it to the libraries listed below
Sorting:
- Materials from the DEF CON 30 talk on PACMAN☆34Oct 28, 2022Updated 3 years ago
- UPDATED: All the action is at https://github.com/xsscx/srd☆13Jul 12, 2021Updated 4 years ago
- IDA Pro plugin to recovery static Thumb2 symbols.☆14Sep 14, 2021Updated 4 years ago
- ☆31Feb 20, 2022Updated 4 years ago
- IDA AArch64 processor extender extension: Adding support for ARMv8.5 memory tagging extension opcodes☆27Jul 6, 2020Updated 5 years ago
- Automated recovery of Linux kernel build configurations☆26Jan 14, 2022Updated 4 years ago
- Microbenchmarks for x86_64 kernel entry methods☆20Feb 21, 2022Updated 4 years ago
- Retargetable recompiler for Linux userspace binaries☆12Jul 25, 2021Updated 4 years ago
- A kernel module that dynamically patches the Linux kernel scheduler so as to allow running a custom function upon thread reschedule☆14Feb 6, 2018Updated 8 years ago
- drvtriks kernel driver for Windows 7 SP1 and 8.1 x64, that tricks around in your system.☆34Oct 6, 2017Updated 8 years ago
- Tool that dumps beacon frames to a pcap file. Works on Windows Vista or Later with any Wireless Card.☆27Mar 19, 2022Updated 4 years ago
- An AFL scaling benchmarking tool☆18May 29, 2020Updated 5 years ago
- A curated collection of scripts for kernel-related devops☆13Nov 23, 2023Updated 2 years ago
- xnu-10.10 mach-o loader that compiles in userland☆19Aug 5, 2015Updated 10 years ago
- Tool to extract the kallsyms (System.map) from a memory dump☆28Aug 17, 2023Updated 2 years ago
- SEP firmware splitter, made in rust.☆45Oct 11, 2024Updated last year
- VMX intrinsics plugin for Hex-Rays decompiler☆74Oct 28, 2019Updated 6 years ago
- Reexport symbols for Mach-O and ELF☆38Mar 2, 2018Updated 8 years ago
- A repository teaching bss/data segment exploitation techniques.☆13Aug 11, 2019Updated 6 years ago
- Apple hardware secrets☆120Jan 10, 2023Updated 3 years ago
- HardsHeap: A Universal and Extensible Framework for Evaluating Secure Allocators☆37Jan 14, 2022Updated 4 years ago
- My-CTF-Challenges☆15Sep 27, 2021Updated 4 years ago
- Website and PoC collection for transient execution attacks☆203Mar 9, 2024Updated 2 years ago
- PoC for CVE-2021-3492 used at Pwn2Own 2021☆43Aug 3, 2021Updated 4 years ago
- Understand and mitigate software-observable side-channels☆506Jan 6, 2021Updated 5 years ago
- Shell Tool for BIOS Developer☆12Jan 20, 2017Updated 9 years ago
- wrapper library for the functionality offered by ptrace. features facilities to enter breakpoint, debug and hook syscalls, etc.☆21Apr 6, 2022Updated 3 years ago
- This repository contains the tools we used in our research on the Google Titan M chip☆206Aug 22, 2022Updated 3 years ago
- Source code of the double-fetch bug detection approach based on Coccinelle engine☆10Jan 2, 2017Updated 9 years ago
- PoC for breaking hypervisor ASLR using branch target buffer collisions☆167Sep 24, 2016Updated 9 years ago
- A migration for the page table entry based side-channel attack agains SGX enclaves.☆19Feb 10, 2025Updated last year
- Linux rootkit experimentations☆19May 19, 2015Updated 10 years ago
- Telling your secrets without page faults: Stealthy page table-based attacks on enclaved execution☆35Apr 21, 2018Updated 7 years ago
- Building Distributed Enclave Applications with Sancus and SGX☆16Dec 9, 2020Updated 5 years ago
- A simple nodejs server that acts as a keystore for Grandmaster.☆20Jan 12, 2020Updated 6 years ago
- A Binary Ninja plugin for importing IDC database dumps from IDA.☆41Oct 13, 2022Updated 3 years ago
- ☆28Sep 9, 2020Updated 5 years ago
- xnu exploitation toolkit☆16Apr 11, 2016Updated 9 years ago
- LLVM backend for EFI Byte Code☆11Jul 14, 2019Updated 6 years ago