{"id":13645796,"url":"https://github.com/raphaelsc/Am-I-affected-by-Meltdown","last_synced_at":"2025-04-21T17:31:23.674Z","repository":{"id":150403444,"uuid":"116319052","full_name":"raphaelsc/Am-I-affected-by-Meltdown","owner":"raphaelsc","description":"Meltdown Exploit / Proof-of-concept / checks whether system is affected by Variant 3: rogue data cache load (CVE-2017-5754), a.k.a MELTDOWN.","archived":false,"fork":false,"pushed_at":"2018-02-27T05:22:38.000Z","size":121,"stargazers_count":541,"open_issues_count":8,"forks_count":71,"subscribers_count":44,"default_branch":"master","last_synced_at":"2025-04-05T17:06:02.846Z","etag":null,"topics":["exploit","intelbug","kaiser","kpti","meltdown","poc","pti","security"],"latest_commit_sha":null,"homepage":"https://meltdownattack.com/","language":"C++","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"bsd-2-clause","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/raphaelsc.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null}},"created_at":"2018-01-04T23:51:12.000Z","updated_at":"2025-03-30T19:13:59.000Z","dependencies_parsed_at":"2023-04-25T16:17:35.453Z","dependency_job_id":null,"html_url":"https://github.com/raphaelsc/Am-I-affected-by-Meltdown","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/raphaelsc%2FAm-I-affected-by-Meltdown","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/raphaelsc%2FAm-I-affected-by-Meltdown/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/raphaelsc%2FAm-I-affected-by-Meltdown/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/raphaelsc%2FAm-I-affected-by-Meltdown/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/raphaelsc","download_url":"https://codeload.github.com/raphaelsc/Am-I-affected-by-Meltdown/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":250100392,"owners_count":21374932,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["exploit","intelbug","kaiser","kpti","meltdown","poc","pti","security"],"created_at":"2024-08-02T01:02:42.036Z","updated_at":"2025-04-21T17:31:23.434Z","avatar_url":"https://github.com/raphaelsc.png","language":"C++","funding_links":[],"categories":["C++"],"sub_categories":[],"readme":"## Am I affected by Meltdown?! Meltdown (CVE-2017-5754) checker\n\n![Alt text](https://github.com/raphaelsc/Am-I-affected-by-Meltdown/blob/master/images/melting.jpg)\n\n#### What am I?\n\nProof-of-concept /\n\nExploit /\n\nChecks whether system is affected by Variant 3: rogue data cache load (CVE-2017-5754), a.k.a MELTDOWN.\n\nThe basic idea is that user will know whether or not the running system is properly patched with\nsomething like KAISER patchset (https://lkml.org/lkml/2017/10/31/884) for example.\n\nCheck out my blog post that guides reader through a Meltdown proof-of-concept: http://funwithbits.net/blog/programmers-guide-to-meltdown/\n\n*** Only works on Linux for now ***\n\n#### How it works?\nIt works by using */proc/kallsyms* to find system call table and checking whether the address of a\nsystem call found by exploiting MELTDOWN match the respective one in */proc/kallsyms*.\n\n#### Getting started\n\nClone, then run `make` to compile the project, then run `meltdown-checker`:\n\n```\ngit clone https://github.com/raphaelsc/Am-I-affected-by-Meltdown.git\ncd ./Am-I-affected-by-Meltdown\nmake\ntaskset 0x1 ./meltdown-checker\n```\n\n#### What to do when you face:\n  - `Unable to read /proc/kallsyms...`\n  \n    That's because your system may be preventing the program from reading kernel symbols in `/proc/kallsyms` due to `/proc/sys/kernel/kptr_restrict` set to `1`.\n  The following command will do the tricky:\n    ```\n    sudo sh -c \"echo 0  \u003e /proc/sys/kernel/kptr_restrict\"\n    ```\n  - `Unable to read /boot/System.map-.`\n  \n    That could probably be because your system not having `/boot` mounted. This program relies on that partition and thus you'd need to mount your `/boot` partition first.\n\n*Please open an issue if you have an idea on how to fallback to another approach in this scenario.*\n\n#### Example output for a system affected by Meltdown:\n\n![Alt text](https://github.com/raphaelsc/Am-I-affected-by-Meltdown/blob/master/images/output.png)\n\n```\nChecking whether system is affected by Variant 3: rogue data cache load (CVE-2017-5754), a.k.a MELTDOWN ...\nChecking syscall table (sys_call_table) found at address 0xffffffffaea001c0 ...\n0xc4c4c4c4c4c4c4c4 -\u003e That's unknown\n0xffffffffae251e10 -\u003e That's SyS_write\n\nSystem affected! Please consider upgrading your kernel to one that is patched with KAISER\nCheck https://security.googleblog.com/2018/01/todays-cpu-vulnerability-what-you-need.html for more details\n```\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fraphaelsc%2FAm-I-affected-by-Meltdown","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fraphaelsc%2FAm-I-affected-by-Meltdown","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fraphaelsc%2FAm-I-affected-by-Meltdown/lists"}