Working Windows and Linux Spectre exploits found on VirusTotal

itman · Mar 2, 2021

Working exploits targeting Linux and Windows systems not patched against a three-year-old vulnerability dubbed Spectre were found by security researcher Julien Voisin on VirusTotal.

The vulnerability was unveiled as a hardware bug in January 2018 by Google Project Zero researchers.

If successfully exploited on vulnerable systems, it can be used by attackers to steal sensitive data, including passwords, documents, and any other data available in privileged memory.

Spectre (CVE-2017-5753) side-channel attacks impact many modern processor models with support for speculative execution and branch prediction made by Intel, AMD, and ARM.
Click to expand...

Spectre exploit leaked on VirustTotal

Voisin found the two working Linux and Windows exploits on the online VirusTotal malware analysis platform.

Unprivileged users can use the exploits to dump LM/NT hashes on Windows systems and the Linux /etc/shadow file from the targeted devices' kernel memory.

The exploit also allows dumping Kerberos tickets that can be used with PsExec for local privilege escalation and lateral movement on Windows systems.
Click to expand...

https://www.bleepingcomputer.com/ne...d-linux-spectre-exploits-found-on-virustotal/

Log in or Sign up

Working Windows and Linux Spectre exploits found on VirusTotal

itman Registered Member

Log in or Sign up

Working Windows and Linux Spectre exploits found on VirusTotal

itman Registered Member

Useful Searches