IAIK/meltdownArchived
Meltdown
Meltdown es un conjunto de utilidades de software diseñadas para eludir la aleatorización de direcciones del kernel y volcar la memoria física para explotar vulnerabilidades de seguridad a nivel de hardware. Sirve como prueba de concepto para la vulnerabilidad de hardware Meltdown, permitiendo la lectura de memoria protegida del kernel en procesadores afectados.
La herramienta proporciona capacidades para identificar el secreto de compensación de aleatorización del mapa físico directo para localizar la memoria del kernel. También incluye funcionalidad para exportar grandes segmentos de memoria física en formato hexdump para la recuperación de cadenas y contraseñas sensibles.
El proyecto cubre el análisis de memoria a través del cálculo de compensación del kernel y la fuga de memoria física. Además, incluye la capacidad de medir la precisión y consistencia de los datos filtrados de la memoria física para verificar la fiabilidad de la vulnerabilidad de hardware.
Features
- Hardware - Serves as a proof of concept for the Meltdown hardware vulnerability to demonstrate unauthorized physical memory access.
- Physical Memory Exports - Saves large segments of physical memory into hexdump format for the recovery of sensitive strings.
- Physical Memory Dumping Tools - Provides a program that exports large segments of physical memory into hexdump format.
- Physical Memory Dumping - Exports large segments of physical memory into hexdump format for the recovery of strings and passwords.
- KASLR Bypass Analysis - Provides capabilities to identify secret randomization offsets of the direct physical map to locate kernel memory.
- Kernel Memory Access - Provides utilities for extracting sensitive data from protected kernel address spaces by bypassing architectural isolation.
- Physical Memory Leakage Tools - Bypasses architectural protections to extract data directly from physical memory addresses.
- Physical Memory Leaking - Reads data from physical memory addresses to demonstrate hardware vulnerabilities that bypass architectural protections.
- Side-Channel Analysis - Implements methods to measure and analyze data leaks via hardware timing and side-channel vulnerabilities.
- Vulnerability Proofs of Concept - Provides functional demonstrations and executable code to prove the exploitability of the Meltdown hardware vulnerability.
- KASLR Slide Adjustments - Calculates the KASLR slide/offset to locate the direct physical map in kernel memory.
- KASLR Offset Resolvers - Identifies the secret randomization offset of the direct physical map to locate kernel memory.
- Memory Offset Calculators - Determines the memory offset used by address space randomization to locate specific kernel data structures.
- Exploit Development Tools - Demonstrates the Meltdown hardware vulnerability in kernel memory.
