google/security-research-pocs
View on GitHub ↗ ★ 1,880 C++ archived
Proof-of-concept codes created as part of security research done by Google Security Team.
8 mentions on Hacker News by 8 people: 1 story, 7 comments · first 2017-10-02 · latest 2024-12-24
20082026
-
…timers are integral for differentiating between timings within the memory hierarchy. https://github.com/google/security-research-pocs/tree/master... If you look at when various browsers changed their timer resolutions, it's entirely a…
comment by vitus · 2024-12-24 · in JavaScript Benchmarking Is a Mess -
…important information going to be stolen if I have mitigations turned off and JavaScript enabled? https://github.com/google/security-research-pocs/tree/master... I don't imagine I'm going to explain it better than the many others who have…
comment by staticassertion · 2022-09-30 · in A call to reconsider memory address-space isolation in Linux -
That specific PoC page relied on performance.now() https://github.com/google/security-research-pocs/blob/d10780... Chrome has limited "performance.now" to have a relatively low resolution: https://chromium-review.googlesource.com/c/chromium…
comment by TheDong · 2022-07-12 · in Retbleed: New speculative execution attack sends Intel and AMD scrambling -
▲ 2
Spectre JavaScript PoCsstory by lawrenceyan · 2021-03-26 · 0 comments
-
…just interested in the PoC, it's available here: https://leaky.page/ and looks like the code is at https://github.com/google/security-research-pocs/tree/master...
comment by EE84M3i · 2021-03-12 · in A Spectre proof-of-concept for a Spectre-proof web -
…Check https://www.slideshare.net/mobile/x00mario/jsmvcomfg-to-ster... or script gadgets research https://github.com/google/security-research-pocs/blob/master... for more complete overview of the issue. Disclaimer: I'm one of the authors.
comment by koto1sa · 2018-02-26 · in Mixing Vue.js templates with server-side templates can lead to XSS -
…https://www.cloudshark.org/captures/657de976c0d1 Used this repo to generate these: https://github.com/google/security-research-pocs/tree/master...
comment by tomatcloudshark · 2017-10-03 · in Behind the Masq: Yet More DNS and DHCP Vulnerabilities -
…and can apparently be exploited by making a PTR record lookup to an attacker-controlled DNS server: https://github.com/google/security-research-pocs/blob/master... My first question is: can you induce people to make PTR lookups? I don't…
comment by agwa · 2017-10-02 · in Behind the Masq: Yet More DNS and DHCP Vulnerabilities