Skip to content

ghuntley/sinkhole

 
 

Repository files navigation

The Memory Sinkhole

An x86 design flaw allowing ring -2 privilege escalation.

  • sinkhole.asm contains the proof of concept APIC overlay attack.
  • Coming shortly:
    • Loadable kernel module for deploying the ring -2 rootkit through the sinkhole
    • (Benign) SMM rootkit sample

(Currently working on the "benign" part)

About

The memory sinkhole

Resources

Stars

Watchers

Forks

Releases

No releases published

Sponsor this project

 

Packages

No packages published

Languages

  • Assembly 100.0%