# speed47/spectre-meltdown-checker

**Attribution required: if you use, quote, or summarise this content, you must credit and link back to [awesome-repositories.com](https://awesome-repositories.com/repository/speed47-spectre-meltdown-checker).**

3,936 stars · 470 forks · Shell

## Links

- GitHub: https://github.com/speed47/spectre-meltdown-checker
- awesome-repositories: https://awesome-repositories.com/repository/speed47-spectre-meltdown-checker.md

## Topics

`cve-2017-5715` `cve-2017-5753` `cve-2017-5754` `cve-2018-3615` `cve-2018-3620` `cve-2018-3639` `cve-2018-3640` `cve-2018-3646` `cve-2019-11135` `downfall` `foreshadow` `meltdown` `mitigation` `reptar` `spectre` `zombieload`

## Description

This project is a diagnostic toolset used to scan CPU hardware and Linux kernel images to assess susceptibility to Spectre, Meltdown, and other transient execution vulnerabilities. It functions as a vulnerability scanner and security auditor designed to identify side-channel attack risks and verify the status of hardware-level security patches.

The tool provides capabilities for both active system assessment and standalone kernel image security analysis. It evaluates the presence of security mitigations by analyzing CPU hardware and kernel configurations without requiring a running kernel or matched local hardware for the image analysis.

The system utilizes static binary analysis and hardware-kernel correlation to map known vulnerabilities. It determines a system's security posture by evaluating the intersection of hardware identifiers and operating system boot parameters.

## Tags

### Security & Cryptography

- [Processor Security Auditing](https://awesome-repositories.com/f/security-cryptography/vulnerability-assessment-testing/security-testing-auditing/processor-security-auditing.md) — Tests the physical processor and operating system to ensure side-channel vulnerabilities are properly addressed.
- [Hardware](https://awesome-repositories.com/f/security-cryptography/compliance-standards/vulnerability-mapping/hardware.md) — Identifies hardware weaknesses by searching for specific instruction sequences or missing mitigation markers in binaries.
- [Kernel Security Auditors](https://awesome-repositories.com/f/security-cryptography/kernel-security-auditors.md) — Evaluates Linux kernel images and configurations for the presence of vulnerability mitigations.
- [Transient Execution Mitigation Audits](https://awesome-repositories.com/f/security-cryptography/security/offensive-operations/vulnerability-research-analysis/vulnerability-mitigation/transient-execution-mitigation-audits.md) — Verifies protection against Spectre and Meltdown vulnerabilities by analyzing CPU and software settings.
- [CPU Vulnerability Assessments](https://awesome-repositories.com/f/security-cryptography/vulnerability-assessment-testing/cpu-vulnerability-assessments.md) — Analyzes CPU hardware and kernel configurations to identify susceptibility to transient execution vulnerabilities. ([source](https://cdn.jsdelivr.net/gh/speed47/spectre-meltdown-checker@master/README.md))
- [CPU](https://awesome-repositories.com/f/security-cryptography/vulnerability-scanners/cpu.md) — Detects susceptibility to Spectre, Meltdown, and other transient execution vulnerabilities on CPU hardware.
- [Transient Execution Analysis](https://awesome-repositories.com/f/security-cryptography/vulnerability-analysis-tools/transient-execution-analysis.md) — Checks for side-channel attack vulnerabilities and the status of hardware-level security patches.

### Operating Systems & Systems Programming

- [Hardware-Kernel Security Correlation](https://awesome-repositories.com/f/operating-systems-systems-programming/kernel-configurations/hardware-kernel-security-correlation.md) — Matches CPU hardware identifiers against kernel configuration flags to determine the effective security posture.
- [Static Binary Analysis](https://awesome-repositories.com/f/operating-systems-systems-programming/static-binary-analysis.md) — Parses compiled kernel images to identify security flags and mitigation patches without executing the code.

### Part of an Awesome List

- [Kernel Image Security Analysis](https://awesome-repositories.com/f/awesome-lists/security/kernel-hardening/kernel-image-security-analysis.md) — Evaluates standalone kernel images to identify active security mitigations without requiring a running kernel. ([source](https://cdn.jsdelivr.net/gh/speed47/spectre-meltdown-checker@master/README.md))

### Development Tools & Productivity

- [Security Posture Evaluation](https://awesome-repositories.com/f/development-tools-productivity/runtime-hardware-configuration/hardware-capability-detection/security-posture-evaluation.md) — Evaluates vulnerability status by intersecting CPU hardware capabilities with active operating system boot parameters.