OK, Thunderclap sounds pretty awesome. Bypassing IOMMU protections by emulating a trusted device and pushing the limits of memory regions you get access to. Technical details: https://thunderclap.io/
Show this thread
-
Even cooler, they published all their tools. Big and $4500 right now, but looking forward to a cost-reduced version, maybe to update my slotscreamers :)
Show this thread
We did what they did with a $100 FPGA devboard and some random mini-itx motherboard as a host a few years ago ;-)
