Exetools - Exploiting CVE-2018-1038

Exetools (https://forum.exetools.com/index.php)

- General Discussion (https://forum.exetools.com/forumdisplay.php?f=2)

- - Exploiting CVE-2018-1038 - Total Meltdown (https://forum.exetools.com/showthread.php?t=18764)

TechLord

04-23-2018 18:58

Exploiting CVE-2018-1038 - Total Meltdown

Exploiting CVE-2018-1038 - Total Meltdown

Full article here :

Quote:

https://blog.xpnsec.com/total-meltdown-cve-2018-1038/

Video Here:

Quote:

http://www.youtube.com/watch?v=5fl5jFy4XMg

Final PoC Code here.

EDIT:

Decided to add a PROJECT FOLDER containing the COMPILED FILES as well , since some have difficulty compiling the PoC.

You can download it here :

Quote:

https://www9.zippyshare.com/v/CJkDnoHW/file.html

Uknow007

04-25-2018 20:22

Anyone can share Compiled version of it?

TechLord

04-26-2018 04:01

Quote:

Originally Posted by Uknow007 (Post 113136)

Anyone can share Compiled version of it?

Anyone knowledgeable enough to try this out should at least be able to compile a single "C" based source file that's given there ?!

No offence, but normally, I do not encourage the idea of pre-compiled exploits being made readily available. The fun mainly lies in studying each and every line of the exploit source and then understanding it.

Cheers :)

Uknow007

04-26-2018 13:11

Why are you so rude?
I was only asking complied version because many users complained on github that it is giving error while compiling.
https://gist.github.com/xpn/3792ec34d712425a5c47caf5677de5fe

Otherwise compiling is not a big issue

TechLord

04-26-2018 14:49

Quote:

Originally Posted by Uknow007 (Post 113142)

Quote:

https://www9.zippyshare.com/v/CJkDnoHW/file.html

It's tricky to get the exploit to actually RUN on one's machine though... You would need to tweak a lot of stuff in the source code.

That is why I have included the full project folder for reference in addition to the compiled sources.

Best of luck and of course, Welcome to EXETOOLS :)

sendersu

04-26-2018 15:10

Quote:

Originally Posted by TechLord (Post 113143)

Sorry my friend, I guess that I am a little paranoid about members who are new to the forum...

I did not realize that people were having issues compiling it ..

Please find the entire project folder including the compiled debug and release versions in their respective folders :

It's tricky to get the exploit to actually RUN on one's machine though... You would need to tweak a lot of stuff in the source code.

That is why I have included the full project folder for reference in addition to the compiled sources.

Best of luck and of course, Welcome to EXETOOLS :)

you are making food from spoon....
but on other thread you said thats evil...

so ?

cybercoder

04-26-2018 15:33

Have you tried using #include <windows.h> to try and compile..

TechLord

04-26-2018 15:54

I have added the Visual Studio Project Folder also to my first post above.

It contains the COMPILED files in DEBUG and RELEASE configurations as well as the ENTIRE project file that you can load directly in your VS IDE.

Please guys, not another fight here please :D

sendersu

04-27-2018 16:02

Quote:

Originally Posted by TechLord (Post 113146)

hey
if you feeding
give all the VS type of projects!
VS2010, VS2013, VS2015, VS2017!
:) :) :)

why you gave just one? thats not fair!

bolo2002

04-27-2018 23:21

no one asked about the msvcr100d.dll missing,good point :)

All times are GMT +8. The time now is 06:45.