
skitter-creek-bath-salts
Unlocking _everything_ on the CPU with DRAM scrambling

Unlocking _everything_ on the CPU with DRAM scrambling

Intel, AMD, VIA & Freescale Microcode Extraction Tool

Decrypts Intel Atom microcode updates and unpacks XuCode with recovered RC4 keys, revealing internal CPU microcode structures for hardware security…

A very very very very very very very long interrupt

CVE-2022-31705 (Geekpwn 2022 Vmware EHCI OOB) POC

OSDP attack tool (and the Elvish word for friend)

Checks for tpm vulnerabilities

wpa3 functionality for the wifi chip in a 2014 macbook pro

Tools to exercise the Linux kernel mitigation for CVE-2018-3639 (aka Variant 4) using the Speculative Store Bypass Disable (SSBD) feature of x86…

Static reverse-engineering of a GIGABYTE H510M K V2 (`H510MKV2.F3`) BIOS image: full UEFI firmware-volume extraction analysis of the PI-spec SMM Core…

POC Code for the NVFLASH driver

Proof-of-concept demonstrating memory leaks in AMD SEV-SNP firmware guest message headers and CPUID request, enabling extraction of sensitive guest…

Osqery extension HP BIOS WMI

Reproducible crash proof-of-concept for CVE-2015-3456 (VENOM) targeting QEMU's virtual floppy disk controller. Demonstrates guest-controlled writes…

Implements the mitigation for CVE-2025-54505 as described by AMD-SB-7053

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00338.html

TPM vulnerability checking tool for CVE-2018-6622. This tool will be published at Black Hat Asia 2019 and Black Hat Europe 2019

A PoC of the CVE-2024-56426 vulnerability.