jprx / PacmanFinder
A Ghidra static analysis tool for locating PACMAN Gadgets
☆12Updated 2 years ago
Alternatives and similar repositories for PacmanFinder:
Users that are interested in PacmanFinder are comparing it to the libraries listed below
- An IOKit kext designed for microarchitectural security research on M1☆32Updated 2 years ago
- M1 bare metal project in Rust☆29Updated 2 years ago
- Defeating Pointer Authentication on the Apple M1 with Hardware Attacks☆37Updated 2 years ago
- Materials from the DEF CON 30 talk on PACMAN☆29Updated 2 years ago
- Patch your macOS kernel to enable support for the high-resolution timers on M1☆25Updated 11 months ago
- ☆23Updated last year
- Pathfinder: High-Resolution Control-Flow Attacks Exploiting the Conditional Branch Predictor☆16Updated 7 months ago
- KLEESpectre is a symbolic execution engine with speculation semantic and cache modelling☆33Updated 4 years ago
- Proof-of-concept implementation for the paper "Efficient and Generic Microarchitectural Hash-Function Recovery" (IEEE S&P 2024)☆27Updated last year
- Proof-of-concept implementation for the paper "Osiris: Automated Discovery of Microarchitectural Side Channels" (USENIX Security'21)☆56Updated 3 years ago
- binary ninja related code☆25Updated 2 years ago
- Repository for synthCT framework (NDSS'22)☆10Updated 2 years ago
- Browser exploitation v8 and sandbox escape challenges with solutions.☆27Updated 2 years ago
- Control-Flow Integrity implementation for the Linux Kernel 3.19☆20Updated 5 years ago
- Linux kernel branches for confidential compute research☆17Updated last week
- A tool for detecting Spectre vulnerabilities through fuzzing☆35Updated 3 years ago
- This repository contains several tools to perform Prefetch Side-Channel Attacks☆57Updated 7 years ago
- Artifact evaluation of paper: MorFuzz: Fuzzing Processor via Runtime Instruction Morphing enhanced Synchronizable Co-simulation☆25Updated last year
- ☆22Updated 4 years ago
- ☆34Updated last year
- A Unit-Based Symbolic Execution Method for Detecting Memory Corruption Vulnerabilities in Executable Codes☆43Updated last year
- ☆15Updated last year
- Symbolic execution for RISC-V machine code based on the formal LibRISCV ISA model☆43Updated last month
- Repository for understanding and writing LLVM passes.☆31Updated 5 years ago
- Binary Ninja plugin for visualizing coverage over time☆25Updated 3 years ago
- Using Data Memory-Dependent Prefetchers to Leak Data at Rest☆35Updated 2 years ago
- ASPFuzz: Fuzzing the AMD SP's ROM bootloader with LibAFL using QEMU full-system emulation☆27Updated last year
- Proof-of-concept implementation for the paper "Indirect Meltdown: Building Novel Side-Channel Attacks from Transient Execution Attacks" (…☆20Updated last year
- ☆16Updated last year
- Constantine is a compiler-based system to automatically harden programs against microarchitectural side channels☆72Updated 2 years ago