OCTOPUS

Samuel AUBERTIN - EURECOM - 2022

OCTOPUS is a Spectre v2 (Branch Target Injection) compiler flag tester for CVE 2017-5715.

It measures the success rate of the same attack using different compiler flags such as:

• Optimisation levels (-O)
• Static linking
• TODO

Dependencies

• clang
• glibc-static

Execution

make

Results aggregation

TODO

• Craft a JSON with metadata
• Upload over SFTP with dedicated ssh key

Sources

• ErikAugust gist
• genua GmbH PoC