Skip to content
0:00 / 0:00

#x86#sandsifter#fuzzing

Breaking the x86 Instruction Set

Black Hat

281K subscribers • 47 videos on Hallway • Conference channel

YouTube
  • Recommended by 15 people: 9 on Hacker News, 2 on Lobsters, 3 in engineering communities and 1 curated list.
  • A classic. People kept recommending it from 2017 to 2021.
  • Presented by Christopher Domas, security researcher

Advanced. Deep dive for people who know the field.

381K views9 years ago15 recommendations

SecurityHardwareCPUs and computer architectureExploits and vulnerabilitiesReverse engineering

Christopher Domas demonstrates how to use page fault analysis and processor fuzzing to exhaustively search for undocumented x86 instructions.

A processor is not a trusted black box for running code; on the contrary, modern x86 chips are packed full of secret instructions and hardware bugs. In this talk, we'll demonstrate how page fault analysis and some creative processor fuzzing can be used to exhaustively search the x86 instruction set and uncover the secrets buried in your chipset. Full Abstract & Presentation Materials: blackhat.com/us-17/briefings.html#breaking-the-x86-instructi…

Why it's here

15 people recommend this

What people say. Recommended as an entertaining and clever demonstration of finding hidden CPU instructions and the limitations of disassemblers.

Moments people linked to

u/bl4ckout31in r/ReverseEngineering • Recommends

Breaking the x86 Instruction Set

u/fproulxTrusted Contributorin r/netsec • Recommends

Fuzzing x86 instruction set

programming-talkscurated list on GitHubRecommends

Under “Security”

Breaking The x86 Instruction Set 00:44:28 by **Christoper Domas** (2017)

Mexon Lobsters • Recommends

Breaking the x86 Instruction Set Discovering undocumented instructions and hardware bugs with x86 implementations.

AceJohnny2on Hacker News • Recommends

On “IDA: What's new in 7.00”

> I trust its disassembler (especially for mainstream languages) more than almost any other disassembler Might I suggest Christopher Domas' Black Hat talk "Breaking the x86 ISA", along the way of which he demonstrates the limitations of all disassemblers out there, including IDA's :) Talk: link to this video Slides: link Paper: link

anfractuosityon Hacker News • Recommends

On “Ask HN: What’s your favorite talk from 2017?”

One of my favourite talks I watched was "Low Cost Non-Invasive Biomedical Imaging - An Open Electrical Impedance Tomography Project" link As it presented an interesting technique I'd never heard of before, along with an implementation. Also I thought the 'Breaking the x86 Instruction Set' talk was extremely clever - link to this video

DyslexicAtheiston Hacker News • Recommends

On “Ask HN: What’s your favorite talk from 2017?”

my favorite were: - How the reputation economy is creating data-driven conformity link - DEF CON 25 (2017) - Weaponizing Machine Learning link - BlackHat 2017: Breaking the x86 Instruction Set link to this video

nnnateon Hacker News • Recommends

On “Ask HN: What are some of the best technical talks you've heard?”

Breaking the x86 Instruction Set by Christopher Domas. link to this video I found it easy to follow and pretty entertaining.

jchwon Hacker News • Recommends

On “A Complete Formal Semantics of x86-64 User-Level Instruction Set Architecture”

There was a really good Blackhat talk a year or two ago in a sort of similar vein: they developed an approach to iterate and find undocumented opcodes. link to this video The software they developed is called Sandsifter.

tyingqon Hacker News • Recommends

On “XuanTie C906 based Allwinner RISC-V processor to power $12 Linux SBC's”

"I thought you were saying that the use of microcode would complicate verification of the hardware." I do think that microcode opens up the possibility of subtle injections to follow code/hardware paths you might not easily predict. A really good talk on reverse engineering an ISA implementation: link to this video

BlackLotus89on Hacker News • Recommends

On “Undocumented x86 instructions in Intel CPUs that can modify microcode”

There was an interesting black hat talk about automatically finding undocumented instructions. 0 Interesting comment on twitter to the instruction of the original post1 0 link to this video 1 link

gbrown_on Hacker News • Recommends

On “How many x86 instructions are there? (2016)”

How about undocumented instructions? Sandsifter1 is an interesting project and the video from BlackHat2 is a good watch. There's also a previous discussion of it on HN3. 1 link 2 link to this video 3 link

brokenmachineon Hacker News • Recommends

On “Undocumented x86 instructions to control the CPU at the microarchitecture level [pdf]”

I watched a super interesting Black Hat video on youtube that talked about discovering secret instructions on CPUs by iterating over each bit of opcodes until you get an illegal instruction, and thereby discovering if an opcode is valid or not. He set up a room full of PCs running his code and had hardware to auto-reset them when they crashed. link to this video

hapaxon Lobsters • Recommends

Breaking the x86 Instruction Set 2017
3View on Lobsters

u/agumonkeyin r/netsec • Recommends

Breaking the x86 Instruction Set

zilitoron Hacker News • Mentions

On “I'm Testifying to Congress about Data Breaches – What Should I Say?”

…g basic security hygiene (e.g. password storage) somewhere standardized in the website would make it much less outrageous. Technology Improvement - Certain technologies enable hackers more than others. SQL seems to enable a lot of hacking. Should we discourage it? - Get rid of Intel ME technologies - link - Get rid of Intel hidden instructions - link to this video - Get rid of Simon and Speck - link - What is "be…