Exetools  

Go Back   Exetools > General > General Discussion

Notices

 
 
Thread Tools Display Modes
Prev Previous Post   Next Post Next
  #2  
Old 01-09-2018, 12:09
TechLord TechLord is offline
Banned User
 
Join Date: Mar 2005
Location: 10 Steps Ahead of You
Posts: 759
Rept. Given: 384
Rept. Rcvd 247 Times in 112 Posts
Thanks Given: 789
Thanks Rcvd at 2,022 Times in 571 Posts
TechLord Reputation: 200-299 TechLord Reputation: 200-299 TechLord Reputation: 200-299
Quote:
Originally Posted by chants View Post
Does anyone have any working code samples which detect the exploit on a given processor or any practically useful instances:
...
Here we go :

Utilities to Check the Status on Windows and Linux :

SpecuCheck - a Windows utility for checking the state of the software mitigations against CVE-2017-5754 (Meltdown) and hardware mitigations against CVE-2017-5715 (Spectre):

Compiled Checker Here :
Code:
 https://github.com/ionescu007/SpecuCheck/releases/download/1.0.4/SpecuCheck.exe

POWERSHELL SCRIPT METHOD (For Windows) :


Quote:
Microsoft has also produced a PowerShell script that checks whether your
PC is vulnerable.

Use the following steps to install and run the test.

1. Press the Windows key and type PowerShell.
2. Right click the PowerShell shortcut and select Run as Administrator.
3. Type Install-Module SpeculationControl and press Enter.
4. If you are prompted to install the NuGet provider, type Y and press Enter, and repeat
if you are warned about installing from an untrusted repository.
5. With the installation complete, type Import-Module SpeculationControl and press
Enter.
6. Type Get-SpeculationControlSettings and press Enter.

Spectre & Meltdown vulnerability/mitigation checker for Linux :
Code:
https://github.com/speed47/spectre-meltdown-checker

EXPLOIT PoCs :

Meltdown Exploit PoC :
Code:
https://github.com/paboldin/meltdown-exploit
PoC from Spectre Attacks- Exploiting Speculative Execution :
Code:
https://gist.github.com/rootkea/ba370a3c81122030510cfe92cdc5c4a2

Last edited by TechLord; 01-09-2018 at 14:06.
Reply With Quote
The Following 3 Users Say Thank You to TechLord For This Useful Post:
an0rma1 (01-09-2018), chants (01-09-2018), Stingered (01-09-2018)
 


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Java log4j exploit chants General Discussion 0 12-20-2021 14:29
Exploiting CVE-2018-1038 - Total Meltdown TechLord General Discussion 9 04-27-2018 23:21
NSA Exploit Kit (Decrypted Files) TechLord General Discussion 20 05-03-2017 01:32
Rowhammer Exploit mcp General Discussion 1 03-11-2015 05:52


All times are GMT +8. The time now is 17:00.


Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX, chessgod101
( Since 1998 )