Speykious/cve-rs
Cve Rs
cve-rs is a memory safety testing framework and vulnerability simulator designed to recreate buffer overflows and segmentation faults. It provides a set of safe memory primitives and a WebAssembly-based security sandbox to evaluate how programs handle unsafe memory access within an isolated execution environment.
The project replaces raw pointer manipulation and type transmutation with functional alternatives, allowing for the simulation of memory-unsafe operations. It enables the reinterpretation of data types through memory representation manipulation rather than unsafe casting to study the impact of memory corruption bugs.
These capabilities support a vulnerability research workflow where simulated exploits are executed within a WebAssembly runtime. This isolation prevents simulated memory errors from causing host system instability while testing security boundaries.
Features
- Wasm Sandboxes - Uses a WebAssembly-based execution sandbox to isolate simulated memory errors and prevent host system instability.
- Memory Reference Abstractions - Implements an abstracted memory reference model to decouple hardware access from software references for safe vulnerability simulation.
- Safe Memory Operation Alternatives - Offers functional alternatives to low-level memory operations such as pointer nulling and type transmutation.
- Safe Memory Primitive Implementations - Provides safe implementations for manipulating memory references as a replacement for raw pointer functions and type transmutation.
- Safe Memory Primitives - Provides safe high-level functional alternatives to raw pointer operations and type transmutation to prevent host system crashes.
- Vulnerability Logic Simulation - Implements software-defined logic to trigger artificial buffer overflows and segmentation faults to mimic real memory vulnerabilities.
- Safe Memory Primitive Libraries - Provides a library of functional alternatives to raw pointer manipulation and type transmutation for managing memory references.
- Type Conversion and Casting - Supports converting values between types by manipulating memory layout instead of using unsafe language-level casting.
- Safe Memory Manipulation - Replaces unsafe pointer operations and type transmutation with safe alternatives for managing memory references.
- Memory Vulnerability Simulation - Allows the introduction of common memory errors, such as buffer overflows and segmentation faults, to test system responses.
- Wasm Memory Vulnerability Simulators - Simulates memory-unsafe operations and vulnerabilities within a WebAssembly execution environment for isolated security testing.
- Memory Type Reinterpretation - Supports changing values between types by manipulating memory representations instead of utilizing unsafe casting.
- Memory Safety Testing Frameworks - Functions as a memory safety testing framework that recreates buffer overflows and segmentation faults to evaluate program handling.
- WebAssembly - Enables the execution of simulated vulnerability code within a WebAssembly runtime or browser for isolated testing.
- Vulnerability Research - Provides a workflow for developing and testing simulated exploits in a sandboxed environment to study memory corruption.
- Wasm - Executes simulated vulnerability code within isolated WebAssembly runtimes to test security boundaries without risking the host.
