awesome-repositories.com
Blog
MCP
awesome-repositories.com

Discover the best open-source repositories with AI-powered search.

ExploreCurated searchesOpen-source alternativesSelf-hosted softwareBlogSitemap
ProjectMCP serverAboutHow we rankPress
LegalPrivacyTerms
© 2026 Bringes Technology SRL·VAT RO45896025·hello@awesome-repositories.com
IAIK avatar

IAIK/meltdownArchived

0
View on GitHub↗
4,172 stars·524 forks·C·Zlib·14 viewsmeltdownattack.com↗

Meltdown

Meltdown is a set of software utilities designed to bypass kernel address randomization and dump physical memory to exploit hardware-level security vulnerabilities. It serves as a proof of concept for the Meltdown hardware vulnerability, enabling the reading of protected kernel memory on affected processors.

The tool provides capabilities to identify the secret randomization offset of the direct physical map to locate kernel memory. It also includes functionality to export large segments of physical memory into hexdump format for the recovery of sensitive strings and passwords.

The project covers memory analysis through kernel offset calculation and physical memory leakage. It further includes the ability to measure the accuracy and consistency of data leaked from physical memory to verify the reliability of the hardware vulnerability.

Features

  • Hardware - Serves as a proof of concept for the Meltdown hardware vulnerability to demonstrate unauthorized physical memory access.
  • Physical Memory Exports - Saves large segments of physical memory into hexdump format for the recovery of sensitive strings.
  • Physical Memory Dumping Tools - Provides a program that exports large segments of physical memory into hexdump format.
  • Physical Memory Dumping - Exports large segments of physical memory into hexdump format for the recovery of strings and passwords.
  • KASLR Bypass Analysis - Provides capabilities to identify secret randomization offsets of the direct physical map to locate kernel memory.
  • Kernel Memory Access - Provides utilities for extracting sensitive data from protected kernel address spaces by bypassing architectural isolation.
  • Physical Memory Leakage Tools - Bypasses architectural protections to extract data directly from physical memory addresses.
  • Physical Memory Leaking - Reads data from physical memory addresses to demonstrate hardware vulnerabilities that bypass architectural protections.
  • Side-Channel Analysis - Implements methods to measure and analyze data leaks via hardware timing and side-channel vulnerabilities.
  • Vulnerability Proofs of Concept - Provides functional demonstrations and executable code to prove the exploitability of the Meltdown hardware vulnerability.
  • KASLR Slide Adjustments - Calculates the KASLR slide/offset to locate the direct physical map in kernel memory.
  • KASLR Offset Resolvers - Identifies the secret randomization offset of the direct physical map to locate kernel memory.
  • Memory Offset Calculators - Determines the memory offset used by address space randomization to locate specific kernel data structures.
  • Exploit Development Tools - Demonstrates the Meltdown hardware vulnerability in kernel memory.

Star history

Star history chart for iaik/meltdownStar history chart for iaik/meltdown

How this analysis was created: This summary and feature list are AI-generated from collected project material and can contain mistakes. Stars, license and language are imported from GitHub. Inclusion does not mean that we have tested or audited this project. Check the source documentation for any feature you depend on. Learn more on our About page.

AI search

Explore more awesome repositories

Describe what you need in plain English — the AI ranks thousands of curated open-source projects by relevance.

Start searching with AI

Frequently asked questions

What does iaik/meltdown do?

Meltdown is a set of software utilities designed to bypass kernel address randomization and dump physical memory to exploit hardware-level security vulnerabilities. It serves as a proof of concept for the Meltdown hardware vulnerability, enabling the reading of protected kernel memory on affected processors.

What are the main features of iaik/meltdown?

The main features of iaik/meltdown are: Hardware, Physical Memory Exports, Physical Memory Dumping Tools, Physical Memory Dumping, KASLR Bypass Analysis, Kernel Memory Access, Physical Memory Leakage Tools, Physical Memory Leaking.

Which projects share features with iaik/meltdown?

Projects with overlapping indexed features include: pwndbg/pwndbg — pwndbg is a GDB plugin and binary analysis framework designed for reverse engineering, exploit development, and… theori-io/copy-fail-cve-2026-31431 — This project is a proof of concept implementation for CVE-2026-31431, serving as a local privilege escalation tool for… v4bel/dirtyfrag — dirtyfrag is a proof-of-concept exploit for Linux kernel privilege escalation. It targets page-cache write… zhzyker/exphub — Exphub is a CVE exploit script library and enterprise software vulnerability suite designed to verify and exploit… ggerganov/kbd-audio — This project is an acoustic keystroke recognition system and audio side-channel analysis tool. It identifies typed… darthton/blackbone — Blackbone is a collection of specialized tools for memory scanning, process injection, and kernel-driver interfaces…

Projects sharing features with Meltdown

These projects share indexed features with Meltdown. Shared tags can include platform or build tooling; verify the primary use case before treating a result as a replacement.
  • pwndbg/pwndbgpwndbg avatar

    pwndbg/pwndbg

    10,051View on GitHub↗

    pwndbg is a GDB plugin and binary analysis framework designed for reverse engineering, exploit development, and low-level program analysis. It extends the core functionality of the debugger to provide advanced memory inspection and automation tools. The project distinguishes itself with specialized capabilities for heap analysis across glibc, jemalloc, and musl, as well as a comprehensive kernel debugging toolkit for inspecting Linux kernel tasks and slab allocators. It includes an integrated ROP gadget searcher for constructing exploit chains and an LLM-powered debugging assistant that provi

    Pythonbinary-ninjacapture-the-flagctf
    View on GitHub↗10,051
  • theori-io/copy-fail-cve-2026-31431theori-io avatar

    theori-io/copy-fail-CVE-2026-31431

    3,958View on GitHub↗

    This project is a proof of concept implementation for CVE-2026-31431, serving as a local privilege escalation tool for the Linux kernel. It functions as an exploit that allows a standard user account to obtain root permissions. The tool demonstrates a kernel page cache attack, where root access is achieved by writing shellcode into the cached pages of a privileged binary. This process manipulates how the Linux kernel handles page caches to execute code with elevated permissions. The repository covers areas of Linux security research, including kernel memory corruption analysis and local priv

    Python
    View on GitHub↗3,958
v4bel/dirtyfragV4bel avatar

V4bel/dirtyfrag

4,845View on GitHub↗

dirtyfrag is a proof-of-concept exploit for Linux kernel privilege escalation. It targets page-cache write vulnerabilities to elevate user permissions to administrative root levels. The project demonstrates a deterministic exploit chain that utilizes functional proofs-of-concept for vulnerabilities in the xfrm-ESP protocol implementation and the RxRPC mechanism. By chaining these memory corruption vulnerabilities, the exploit achieves root access without relying on timing-based race conditions. The tool covers kernel memory manipulation and the development of exploit chains to test local pri

C
View on GitHub↗4,845
  • zhzyker/exphubzhzyker avatar

    zhzyker/exphub

    4,282View on GitHub↗

    Exphub is a CVE exploit script library and enterprise software vulnerability suite designed to verify and exploit known security flaws in server environments such as WebLogic, Struts2, Tomcat, and JBoss. It functions as a remote code execution toolkit and a web shell deployment framework for triggering unauthorized command execution and establishing persistent access on remote systems. The project includes specialized utilities for internal network reconnaissance, specifically using server-side request forgery to scan for open ports and services. It further provides mechanisms for bypassing a

    Pythoncve-2020-10199cve-2020-10204cve-2020-11444
    View on GitHub↗4,282
  • Compare all 30 related projects→