hacnho/protobuf-dotnetsettings-handwritten-signatures-dos-poc

Protocol Buffers DotnetSettings handwritten_signatures materialization DoS PoC

This repository contains a benign security research PoC for a .pb artifact that drives repeated-string materialization during client_pb2.DotnetSettings.ParseFromString(...).

Files:

• control_one_handwritten_signature.pb
• malicious_handwritten_signatures_5000000.pb
• reproduce.py

Exact public file URLs:

• https://huggingface.co/hacnho/protobuf-dotnetsettings-handwritten-signatures-dos-poc/resolve/main/control_one_handwritten_signature.pb
• https://huggingface.co/hacnho/protobuf-dotnetsettings-handwritten-signatures-dos-poc/resolve/main/malicious_handwritten_signatures_5000000.pb
• https://huggingface.co/hacnho/protobuf-dotnetsettings-handwritten-signatures-dos-poc/resolve/main/reproduce.py

Expected signal:

• control:
  • handwritten_signatures_len = 1
  • first_handwritten_signature_len = 9999995
• malicious:
  • handwritten_signatures_len = 5000000
• latest local replay:
  • vmhwm_delta_kb = 199720
  • elapsed_ratio = 11.86
• latest public replay:
  • vmhwm_delta_kb = 199748
  • elapsed_ratio = 9.96