vusec/ridl

Stars
345
Rank 122,750 (Top 3 %)
Language
C
Created over 5 years ago
Updated over 4 years ago

vusec/ridl

vusec

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

RIDL test suite and exploits

RIDL

This repository contains the following:

exploits

The 'shadow' PoC leaks the /etc/shadow file from a non-root user; thanks to Jonas Theis.

pocs

Various proof-of-concept exploits for RIDL-class vulnerabilities.

tests

Tests for a variety of Intel CPU issues.

tool

This is our old MDS Tool code.

drammer

Native binary for testing Android phones for the Rowhammer bug

vuzzer

revanc

Reverse Engineering Page Table Caches in Your Processor

vuzzer64

This implements a 64-bit version of vusec/vuzzer fuzzing tool.

parmesan

ParmeSan: Sanitizer-guided Greybox Fuzzing

hammertime

trrespass

bhi-spectre-bhb

This repository contains exploit and reverse-engineering source code regarding the Spectre-BHB/Branch History Injection vulnerability

guardion

Android GuardION patches to mitigate DMA-based Rowhammer attacks on ARM

collabfuzz

CollabFuzz: A Framework for Collaborative Fuzzing

dangsan

floatzone

pandacap

A framework for streamlining the capture of PANDA execution traces.

slam

Spectre based on Linear Address Masking

deltapointers

Delta Pointers: Buffer Overflow Checks Without the Checks (EuroSys'18)

kasper

Kasper: Scanning for Generalized Transient Execution Gadgets in the Linux Kernel

smash

memsentry

Open-source release for MemSentry (EuroSys'17)

typearmor

Implementation of our S&P16 paper: A Tough Call: Mitigating Advanced Code-Reuse Attacks

uncontained

Uncovering Container Confusion in the Linux Kernel

inspectre-gadget

InSpectre Gadget: in-depth inspection and exploitability analysis of Spectre disclosure gadgets

blindside

xlate

Code to evaluate XLATE attacks as well existing cache attacks.

typesan

TypeSan checks casts in C++ code - code released for CCS 2016

minesweeper

Tools used for MineSweeper project

safeinit

SafeInit protects software from uninitialized read vulnerabilities - code released for NDSS 2017

kmvx

kMVX: Detecting Kernel Information Leaks with Multi-variant Execution

patharmor

instrumentation-infra

An extendable and flexible infrastructure for program instrumentation.

mvarmor

Multi-variant execution (MVX) using hardware-assisted process virtualization (with Dune)

shalloc

Shared memory allocator

tlbdr

dangzero

tlbkit

some tlb experimentation code: calculate L1, L2 miss penalties and show cross-HT interference.

fpvi-scsb

Rage Against The Machine Clear: A Systematic Analysis of Machine Clears and Their Implications for Transient Execution Attacks

triereme

midfat

ramses

Memory address translation library.

LookUB

snappy

TIFF

drammer-app

GUI for testing Android phones for the Rowhammer bug

typeisolation

Type-based Data Isolation prototype

vusion

probeguard

ProbeGuard: Mitigating Probing Attacks Through Reactive Program Transformations [ ASPLOS'19 ]

dune

poking-holes

Project for the Poking Holes in Information Hiding paper

alis

LLVMUtils

This repository contains a number of generic LLVM utility functions, setters, and/or getters for use in different LLVM passes.

libshrink

A user-space runtime library to shrink the address space to a specified number of bits.

zebram

pibe

PIBE project source code

infra-sanitizers

Configurations for benchmarking sanitizers

qemu-hypercall

QEMU offering the hypercall interface used by HSFI and OSIRIS

firestarter

aos-labs-2021

Vrije Universiteit Amsterdam - Advanced Operating Systems (OpenLSD)

osiris

delorean

hammertime-fliptables

Rowhammer flip tables collected using Hammertime.

instrumentation-skeleton

Skeleton repository for instrumentation-infra users.

Copy-on-Flip

aos-labs-2020

Vrije Universiteit Amsterdam - Advanced Operating Systems (OpenLSD)

absynthe

ABSynthe related code

minix-llvm

MINIX with the changes from the llvm_squashed branch needed for OSIRIS and HSFI

libumem-mvx

libumem fork for MvArmor

SCC

The |S|uborbital |C||C|annon compiler fuzzing framework

libdft64-ng

Fork of https://github.com/AngoraFuzzer/libdft64 with support for shadow memory-based tagmap, small set tags, pointer/offset labels, and taint all memory semantics.

dsn-2016-hsfi

type-after-type

kamino

SpeculationAtFault-AE

Artifact of "Speculation at Fault: Modeling and Testing Microarchitectural Leakage of CPU Exceptions"

kdfsan-llvm-project

kdfsan-syzkaller

kdfsan-linux

coco-docs

Vrije Universiteit Amsterdam - Compiler Construction (aux docs)

pirop

PIROP Asterisk exploits

vu-forms-and-templates

VU forms and templates

uncontained-llvm-project

lldb-dfsan

Debugging DFSan labels with LLDB