bytereaper77/jump-over-aslr-btbjump over aslr attacking branch predictors to bypass aslr Technique
Author: Byte Reaper
This repository contains research C implementation that demonstrates concepts related to branch predictors, speculative execution, and cache-based side channels in the context of address space layout randomization (ASLR).
Linux x86_64
GCC
CPU that supports BTB
gcc btb.c -o BTB
./BTB
[+] check System Security for Check branch predictors...
[+] Sleep Success.
[-] Not Detect Single Thread Indirect Branch Predictors.
[-] Not Detect Indirect Branch Restricted Speculation
[-] Not Detect Speculative Store Bypass Disable .
[+] Detect L1D_FLUSH.
[+] Detect MD_CLEAR.
[-] Not Detect IA32_ARCH_CAPABILITIES.
[+] Result Detect Branch predictors :
[+] Detect Branch predictors
[+] Get Address victimValue() function Success.
...
MIT