Repositories list

• ExfilState

  Public
  Architectural cache side channel fuzzer from the research paper "ExfilState: Automated Discovery of Timer-Free Cache Side Channels on ARM CPUs".

  C

  •

  MIT License

  •0•2•0•0•Updated Oct 14, 2025Oct 14, 2025

• RISCover

  Public
  Differential CPU fuzzing framework from the paper "RISCover: Automatic Discovery of User-exploitable Architectural Security Vulnerabilities in Closed-Source RISC-V CPUs".

  Python

  •

  MIT License

  •0•4•0•0•Updated Oct 12, 2025Oct 12, 2025

• RISCover-artifacts

  Public
  Artifact for the paper "RISCover: Automatic Discovery of User-exploitable Architectural Security Vulnerabilities in Closed-Source RISC-V CPUs".

  Verilog

  •

  MIT License

  •0•1•0•0•Updated Oct 12, 2025Oct 12, 2025

• ExfilState-artifacts

  Public
  Artifact for the paper "ExfilState: Automated Discovery of Timer-Free Cache Side Channels on ARM CPUs".

  C

  •

  MIT License

  •0•0•0•0•Updated Oct 12, 2025Oct 12, 2025

• StyleMail

  Public
  CSS

  •0•1•0•0•Updated Sep 26, 2025Sep 26, 2025

• security-header-parsing

  Public
  Code for our 2025 ACM CCS Paper "Head(er)s Up! Detecting Security Header Inconsistencies in Browsers"

  Python

  •

  Other

  •0•2•0•0•Updated Sep 16, 2025Sep 16, 2025

• hammulator

  Public
  Proof-of-concept implementation for the paper "Hammulator: Simulate Now - Exploit Later" (DRAMSec 2023)

  C

  •

  MIT License

  •2•17•0•0•Updated Sep 15, 2025Sep 15, 2025

• scase

  Public
  Automated Framework for recovering Secrets from Side-Channel Traces. (USENIX Security '25)

  C

  •1•11•0•0•Updated Aug 12, 2025Aug 12, 2025

• scase-traces

  Public
  C

  •0•0•0•0•Updated Aug 7, 2025Aug 7, 2025

• constant-time-compilers

  Public
  C

  •0•4•0•0•Updated Jul 4, 2025Jul 4, 2025

• ansible-role-proxmox

  Public
  IaC for Proxmox VE clusters.

  Python

  •

  MIT License

  •175•1•0•0•Updated Jun 5, 2025Jun 5, 2025

• osiris

  Public
  Proof-of-concept implementation for the paper "Osiris: Automated Discovery of Microarchitectural Side Channels" (USENIX Security'21)

  C++

  •

  Apache License 2.0

  •15•60•0•0•Updated Jun 4, 2025Jun 4, 2025

• cva6

  Public
  The CORE-V CVA6 is an Application class 6-stage RISC-V CPU capable of booting Linux

  Assembly

  •

  Other

  •838•0•0•0•Updated May 19, 2025May 19, 2025

• LLCSliceReversing

  Public
  C

  •2•12•0•0•Updated May 15, 2025May 15, 2025

• MAPAlloc

  Public
  C

  •1•2•0•0•Updated Apr 22, 2025Apr 22, 2025

• ShadowLoad

  Public
  C

  •1•10•0•0•Updated Apr 1, 2025Apr 1, 2025

• WebREC

  Public
  This repository provides the code is used in the Usenix paper "Web Execution Bundles: Reproducible, Accurate, and Archivable Web Measurements".

  Jupyter Notebook

  •0•1•0•0•Updated Mar 26, 2025Mar 26, 2025

• Security-RISC

  Public
  Proof-of-concept implementation for the paper "A Security RISC: Microarchitectural Attacks on Hardware RISC-V CPUs" (IEEE S&P 2023)

  C

  •10•73•1•0•Updated Mar 18, 2025Mar 18, 2025

• PortPrint

  Public
  Assembly

  •

  GNU General Public License v2.0

  •0•1•0•0•Updated Feb 20, 2025Feb 20, 2025

• PeripheralInstinct

  Public
  HTML

  •

  MIT License

  •1•2•0•0•Updated Feb 17, 2025Feb 17, 2025

• Fontention

  Public
  0•0•0•0•Updated Feb 17, 2025Feb 17, 2025

• Lixom

  Public
  C

  •

  Other

  •2•4•0•0•Updated Feb 13, 2025Feb 13, 2025

• xs-observations

  Public
  Code for our 2023 IEEE S&P Paper "The Leaky Web: Automated Discovery of Cross-Site Information Leaks in Browsers and the Web"

  Jupyter Notebook

  •

  MIT License

  •2•14•0•0•Updated Dec 12, 2024Dec 12, 2024

• IRQGuard

  Public
  Framework to effectively immediately stop ongoing microarchitectural Attacks with low-overhead. (ACSAC '24)

  C

  •2•11•0•0•Updated Dec 6, 2024Dec 6, 2024

• login-security-landscape

  Public
  Code for our 2024 IEEE S&P Paper "To Auth or Not To Auth? A Comparative Analysis of the Pre- and Post-Login Security Landscape"

  TypeScript

  •

  MIT License

  •4•10•6•1•Updated Sep 26, 2024Sep 26, 2024

• http-conformance

  Public
  Code for our 2024 ACM AsiaCCS Paper "Who's Breaking the Rules? Studying Conformance to the HTTP Specifications and its Security Impact"

  Python

  •

  MIT License

  •2•16•3•0•Updated Sep 26, 2024Sep 26, 2024

• cascading-spy-sheets

  Public
  This repository contains the artifact for our paper "Cascading Spy Sheets: Exploiting the Complexity of Modern CSS for Email and Browser Fingerprinting" published at NDSS 2025.

  HTML

  •

  MIT License

  •2•21•0•0•Updated Sep 6, 2024Sep 6, 2024

• CacheWarp

  Public
  Proof-of-concept implementation for the paper "CacheWarp: Software-based Fault Injection using Selective State Reset" (USENIX Security 2024)

  C

  •

  Apache License 2.0

  •3•63•0•0•Updated Aug 12, 2024Aug 12, 2024

• GhostWrite

  Public
  Proof-of-concept for the GhostWrite CPU bug.

  cpumicroarchitectural-attack

  C

  •

  MIT License

  •17•115•0•0•Updated Aug 9, 2024Aug 9, 2024

• CVA6-Vivado-Project-with-Xilinx-AXI-Ethernet

  Public
  Vivado 2023.2 project built around the CVA6 RISC-V CPU and a software stack including u-boot and embedded linux.

  Tcl

  •0•5•0•0•Updated Jul 29, 2024Jul 29, 2024