/sinkhole

The memory sinkhole

Primary LanguageAssembly

The Memory Sinkhole

An x86 design flaw allowing ring -2 privilege escalation.

  • sinkhole.asm contains the proof of concept APIC overlay attack.
  • Coming shortly:
    • Loadable kernel module for deploying the ring -2 rootkit through the sinkhole
    • (Benign) SMM rootkit sample

(Currently working on the "benign" part)