hacnho/protobuf-service-enums-dos-poc

Protocol Buffers Service enums materialization DoS PoC

This repository contains a benign security research PoC for a .pb artifact that drives repeated-message materialization during service_pb2.Service.ParseFromString(...).

Files:

• control_one_enum.pb
• malicious_enums_5000000.pb
• reproduce.py

Exact public file URLs:

• https://huggingface.co/hacnho/protobuf-service-enums-dos-poc/resolve/main/control_one_enum.pb
• https://huggingface.co/hacnho/protobuf-service-enums-dos-poc/resolve/main/malicious_enums_5000000.pb
• https://huggingface.co/hacnho/protobuf-service-enums-dos-poc/resolve/main/reproduce.py

Expected signal:

• control:
  • enums_len = 1
  • first_name_len = 9999990
• malicious:
  • enums_len = 5000000
• latest public replay:
  • vmhwm_delta_kb = 448868
  • elapsed_ratio = 16.31