Sploitus

Exploit for Observable Discrepancy in Intel Atom C

gitee · 2020-10-28

Exploit Code

MARKDOWN2 lines
## https://sploitus.com/exploit?id=017506F8-6322-5D79-831D-784FBE2C529F
PoC exploit for CVE-2017-5753 and CVE-2017-5715, variants of the Spectre attack. The target product/service is the CPU, specifically the x86 architecture. The vulnerability class/vector is speculative execution, allowing an attacker to trick error-free programs into leaking their secrets. The probable entry point is the `victim_function()` in `Source.c`, which is called by `readMemoryByte()`. Notable dependencies/tooling include `stdio.h`, `stdint.h`, and `intrin.h` for rdtscp and clflush. The execution context is a compiled binary executable, `spectre.out`, which can be run from the command line. Preconditions include a vulnerable CPU and a compiled binary executable. Expected impact includes remote code execution and privilege escalation. Observable network or file artifacts/IO include the output of the `spectre.out` executable, which will display the secret text "The Magic Words are Squeamish Ossifrage." if the system is vulnerable.