CactiLab / ret2ns-Cortex-M-TrustZoneLinks
This repo demonstrates the Return-to-Non-Secure (ret2ns) vulnerability on ARM Cortex-M TrustZone. It contains the attack and defense demonstration, as well as the defense overhead evaluation.
☆31Updated last year
Alternatives and similar repositories for ret2ns-Cortex-M-TrustZone
Users that are interested in ret2ns-Cortex-M-TrustZone are comparing it to the libraries listed below
Sorting:
- SyzTrust's main repository. Start here to install.☆17Updated last year
- Pre-Silicon Hardware Fuzzing Toolkit☆56Updated 2 weeks ago
- Proof-of-concept implementation for the paper "Osiris: Automated Discovery of Microarchitectural Side Channels" (USENIX Security'21)☆57Updated 3 years ago
- The published code repo for the Cortex-M SoK paper.☆19Updated 2 months ago
- Proof-of-concept implementation for the paper "A Security RISC: Microarchitectural Attacks on Hardware RISC-V CPUs" (IEEE S&P 2023)☆67Updated 2 months ago
- Practical Data-Only Attack Generation☆40Updated last year
- ☆46Updated 2 years ago
- ☆74Updated last year
- ☆21Updated last year
- Proof-of-concept implementation for the paper "Indirect Meltdown: Building Novel Side-Channel Attacks from Transient Execution Attacks" (…☆22Updated last year
- Proof-of-concept implementation for the paper "Hammulator: Simulate Now - Exploit Later" (DRAMSec 2023)☆17Updated last year
- ☆62Updated 3 weeks ago
- Rage Against The Machine Clear: A Systematic Analysis of Machine Clears and Their Implications for Transient Execution Attacks☆21Updated 3 years ago
- Artifact evaluation of paper: MorFuzz: Fuzzing Processor via Runtime Instruction Morphing enhanced Synchronizable Co-simulation☆29Updated last month
- ViDeZZo source code.☆35Updated last month
- Proof-of-concept implementation for the paper "Reviving Meltdown 3a" (ESORICS 2023)☆15Updated last year
- Medusa Repository: Transynther tool and Medusa Attack☆21Updated 4 years ago
- Same-Architecture Firmware Rehosting and Fuzzing☆124Updated 5 months ago
- Code of ISSTA'22: PrIntFuzz: Fuzzing Linux Drivers via Automated Virtual Device Simulation☆60Updated 6 months ago
- An open-source deterministic fault attack simulator prototype☆58Updated 4 years ago
- ☆27Updated 3 years ago
- ARM CCA support for QEMU. Check wiki for instructions. https://github.com/Huawei/Huawei_CCA_RMM/wiki☆24Updated 2 years ago
- SHERLOC: Secure and Holistic Control-Flow Violation Detection on Embedded Systems☆16Updated last year
- ☆65Updated 7 months ago
- ☆23Updated 8 months ago
- The top repository for the code accompanying our paper "Mind the Gap: Studying the Insecurity of Provably Secure Embedded Trusted Executi…☆13Updated 2 years ago
- FirmGuide: Boosting the Capability of Rehosting Embedded Linux Kernels through Model-Guided Kernel Execution☆19Updated 2 years ago
- Artifact of "Indirector: High-Precision Branch Target Injection Attacks Exploiting the Indirect Branch Predictor" [USENIX Security 2024]☆61Updated 9 months ago
- Proof-of-concept implementation for the paper "Efficient and Generic Microarchitectural Hash-Function Recovery" (IEEE S&P 2024)☆30Updated last year
- InSpectre Gadget: in-depth inspection and exploitability analysis of Spectre disclosure gadgets☆52Updated last month