Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.

🔒Unified API for password hashing algorithms

👥 A Python post-quantum cryptography library

Comprehensive timing leak protection for Rust programs https://www.chosenplaintext.ca/open-source/rust-timing-shield/

timing attack to check if devtools are open

Timing Attack on TLS' ECDSA signature

Artifacts for the "Minerva: The curse of ECDSA nonces" paper at CHES 2020

Python Time Based Authentication Attack Tool

A repository of tools for verifying constant-timeness

Leaking (a lot of) Data from Air-Gapped Computers via the (small) Hard Drive LED

Variant 1 of the Spectre attack which is to bypass the bounds checks in the target process and retrieve the private data. Here in this example, I have demonstrated how to retrieve a string data using the attack.

Anti Virtulization, Anti Debugging, AntiVM, Anti Virtual Machine, Anti Debug, Anti Sandboxie, Anti Sandbox

Collection of TLS vulnerabilities ready to be exploited.

Detect side channels with statistically rigorous methods.

SMArTCAT Symbolically Modeled Architecture Timing Channel Analysis Tool

Demo of API key cracking using a timing attack

SQL blind data extraction POC

simulation of a timing covert channel , where a sender transmits a binary message to a receiver without directly sending data.

This is a quick demonstration of how authentication shouldn't use strcmp (or other non-time-compensated methods)

Analyse timing leakage against ECU over the CAN bus network.