Repositories list

• xs-observations

  Public
  Code for our 2023 IEEE S&P Paper "The Leaky Web: Automated Discovery of Cross-Site Information Leaks in Browsers and the Web"

  Jupyter Notebook

  •

  MIT License

  •1•13•0•0•Updated Dec 12, 2024Dec 12, 2024

• IRQGuard

  Public
  C

  •0•6•0•0•Updated Dec 6, 2024Dec 6, 2024

• cva6

  Public
  The CORE-V CVA6 is an Application class 6-stage RISC-V CPU capable of booting Linux

  Assembly

  •

  Other

  •705•0•0•0•Updated Nov 29, 2024Nov 29, 2024

• login-security-landscape

  Public
  Code for our 2024 IEEE S&P Paper "To Auth or Not To Auth? A Comparative Analysis of the Pre- and Post-Login Security Landscape"

  TypeScript

  •

  MIT License

  •3•8•1•0•Updated Sep 26, 2024Sep 26, 2024

• http-conformance

  Public
  Code for our 2024 ACM AsiaCCS Paper "Who's Breaking the Rules? Studying Conformance to the HTTP Specifications and its Security Impact"

  Python

  •

  MIT License

  •1•10•0•0•Updated Sep 26, 2024Sep 26, 2024

• cascading-spy-sheets

  Public
  This repository contains the artifact for our paper "Cascading Spy Sheets: Exploiting the Complexity of Modern CSS for Email and Browser Fingerprinting" published at NDSS 2025.

  HTML

  •

  MIT License

  •0•3•0•0•Updated Sep 6, 2024Sep 6, 2024

• CacheWarp

  Public
  Proof-of-concept implementation for the paper "CacheWarp: Software-based Fault Injection using Selective State Reset" (USENIX Security 2024)

  C

  •

  Apache License 2.0

  •3•58•0•0•Updated Aug 12, 2024Aug 12, 2024

• GhostWrite

  Public
  Proof-of-concept for the GhostWrite CPU bug.

  cpumicroarchitectural-attack

  C

  •

  MIT License

  •16•105•0•0•Updated Aug 9, 2024Aug 9, 2024

• Security-RISC

  Public
  Proof-of-concept implementation for the paper "A Security RISC: Microarchitectural Attacks on Hardware RISC-V CPUs" (IEEE S&P 2023)

  C

  •5•54•1•0•Updated Aug 1, 2024Aug 1, 2024

• CVA6-Vivado-Project-with-Xilinx-AXI-Ethernet

  Public
  Vivado 2023.2 project built around the CVA6 RISC-V CPU and a software stack including u-boot and embedded linux.

  Tcl

  •0•0•0•0•Updated Jul 29, 2024Jul 29, 2024

• cva6-sdk

  Public
  CVA6 SDK containing RISC-V tools and Buildroot

  Makefile

  •67•0•0•0•Updated Jul 26, 2024Jul 26, 2024

• analogdevices-hdl-lib

  Public
  HDL libraries and projects

  Verilog

  •

  Other

  •1.5k•0•0•0•Updated Jul 26, 2024Jul 26, 2024

• trust-me-if-you-can

  Public
  HTML

  •

  GNU Affero General Public License v3.0

  •0•0•0•0•Updated Jul 25, 2024Jul 25, 2024

• loop-DoS

  Public
  Repository for application-layer loop DoS

  Python

  •6•31•0•0•Updated Mar 20, 2024Mar 20, 2024

• Switchpoline

  Public
  Proof-of-concept implementation for the paper "Switchpoline: A Software Mitigation for Spectre-BTB and Spectre-BHB on ARMv8" (AsiaCCS 2024)

  C++

  •

  Apache License 2.0

  •1•9•0•0•Updated Dec 14, 2023Dec 14, 2023

• mwait

  Public
  Proof-of-concept implementation for the paper "(M)WAIT for It: Bridging the Gap between Microarchitectural and Architectural Side Channels" (USENIX Security'23)

  C

  •

  Apache License 2.0

  •3•22•0•0•Updated Nov 30, 2023Nov 30, 2023

• Ethical-Server-Side-Scanning

  Public
  Where Are the Red Lines? Towards Ethical Server-Side Scans in Security and Privacy Research - Supplementary Material

  0•0•0•0•Updated Nov 21, 2023Nov 21, 2023

• Verification-Disjunctive-Time-Networks

  Public
  Python

  •

  MIT License

  •0•0•0•0•Updated Oct 4, 2023Oct 4, 2023

• regcheck

  Public
  Proof-of-concept implementation for the paper "Reviving Meltdown 3a" (ESORICS 2023)

  C

  •

  MIT License

  •0•11•0•0•Updated Sep 25, 2023Sep 25, 2023

• indirect-meltdown

  Public
  Proof-of-concept implementation for the paper "Indirect Meltdown: Building Novel Side-Channel Attacks from Transient Execution Attacks" (ESORICS 2023)

  C

  •

  MIT License

  •0•20•0•0•Updated Sep 24, 2023Sep 24, 2023

• Microarchitectural-Hash-Function-Recovery

  Public
  Proof-of-concept implementation for the paper "Efficient and Generic Microarchitectural Hash-Function Recovery" (IEEE S&P 2024)

  C++

  •

  MIT License

  •3•27•0•0•Updated Aug 30, 2023Aug 30, 2023

• hammulator

  Public
  Proof-of-concept implementation for the paper "Hammulator: Simulate Now - Exploit Later" (DRAMSec 2023)

  C

  •

  MIT License

  •2•13•0•0•Updated Jun 19, 2023Jun 19, 2023

• internet-archive-study

  Public
  This repository contains the crawling scripts used for the paper "You Call This Archaeology? Evaluating Web Archives for Reproducible Web Security Measurements"

  Python

  •0•0•0•0•Updated May 25, 2023May 25, 2023

• consent-notices

  Public
  Python

  •1•1•0•0•Updated May 19, 2023May 19, 2023

• 12-angry-developers-web-applications

  Public
  This repository contains our code for each version (programming language) for the Coding Task. It is a product of our work published at the 28th ACM Conference on Computer and Communications Security (CCS) in 2021.

  HTML

  •

  GNU Affero General Public License v3.0

  •1•1•0•1•Updated May 9, 2023May 9, 2023

• DNS-Applayer-DDoS-Protection

  Public
  Code and datasets for protecting DNS infrastructures against application-layer DDoS attacks (EuroS&P '23 paper)

  Rust

  •

  BSD 3-Clause "New" or "Revised" License

  •1•2•0•1•Updated Apr 18, 2023Apr 18, 2023

• micsec-training

  Public
  The material for the hands-on session "Turning Timing Differences into Data Leakage" at Mic-Sec 2022

  C

  •0•3•0•0•Updated Dec 7, 2022Dec 7, 2022

• gdpr-consent

  Public
  Code for our paper: "Share First, Ask Later (or Never?) - Studying Violations of GDPR's Explicit Consent in Android Apps"

  Python

  •2•10•0•0•Updated Oct 20, 2022Oct 20, 2022

• browser-cpu-fingerprinting

  Public
  This repository contains the code for our paper "Browser-based CPU Fingerprinting".

  Jupyter Notebook

  •6•36•0•0•Updated Oct 19, 2022Oct 19, 2022

• html-violations-analyzer

  Public
  Python

  •0•0•0•0•Updated Sep 27, 2022Sep 27, 2022