Guidance for the Spectre, Meltdown, Speculative Store Bypass, Rogue System Register Read, Lazy FP State Restore, Bounds Check Bypass Store, TLBleed, and L1TF/Foreshadow vulnerabilities as well as general hardware and firmware security guidance. #nsacyber

SpecuCheck is a Windows utility for checking the state of the software mitigations and hardware against CVE-2017-5754 (Meltdown), CVE-2017-5715 (Spectre v2), CVE-2018-3260 (Foreshadow), and CVE-2018-3639 (Spectre v4)

A semi-demi-working proof of concept for a mix of spectre and meltdown vulnerabilities

Reproducing malicious memory reading on Intel i5 and Intel Xeon using a Spectre attack

Microarchitectural attack development frameworks for prototyping attacks in native code (C, C++, ASM) and in the browser

KLEESpectre is a symbolic execution engine with speculation semantic and cache modelling

Spectre-based Meltdown attack (i.e. 2-in1) proof of concept in 99 lines of code. For more details see 'The Spectre of Meltdowns' presentation:

Microarchitectural weird machine implementation using exceptions, TSX, branch predictors, and branch target buffers.

Spectre and Meltdown in a docker containerized test

TEApot(Transient Execution Attack pot) is a project used to evaluate whether your system is affected by Meltdown and Spectre. My goal is to build a easy-to-use(hard to implement) and configurable transient attack test suite.

Proof of Concept - Spectre

Proof of Concept implementation + Brief Tutorial of the Meltdown and Spectre attacks [+ Flush/Realod]

Project contains code that demonstrates how Meltdown and Spectre V1/V4 vulnerabilities work and shows the differences between them

Modern computer systems are facing security challenges and thus are forced to employ various encryption, mitigation mechanisms, and other measures that affect significantly their performance. In this study, we aim to identify the energy and run-time performance implications of Meltdown and Spectre mitigation mechanisms.

Linux Meltdown PoC

Meltdown ‘worst ever’ CPU bugs affect most computers , Old but Gold

This repository contains several applications, demonstrating the Meltdown bug. The videos were removed so people with very low WAN download speeds could reach this in a minute or two, rather than 10.

This repository contains several applications, demonstrating the Meltdown bug.

Meltdown & Spectre - catastrophic vulnerabilities - exploited 🛡️