Agent Skills
› gmh5225/awesome-game-security
› dma-attack-techniques
dma-attack-techniques
GitHub分析PCIe DMA威胁、FPGA行为及IOMMU防御机制。用于识别内存发起者、传输路径和隔离边界,涵盖pcileech攻击、Thunderbolt/USB4取证及硬件级内存访问防护,辅助安全研究与检测。
Trigger Scenarios
分析PCIe DMA攻击技术
评估IOMMU或FPGA安全措施
进行硬件级内存取证
研究DMA相关的威胁模型
Install
npx skills add gmh5225/awesome-game-security --skill dma-attack-techniques -g -y
SKILL.md
Frontmatter
{
"name": "dma-attack-techniques",
"description": "Analyze PCIe DMA threats, host-mediated memory acquisition, FPGA behavior, and IOMMU defenses. Use when the memory initiator or device boundary matters; use kernel security for host-only mechanisms."
}
DMA attack techniques
Identify the memory initiator, transport, required privilege, isolation boundary, and observable artifacts before classifying a technique as DMA.
Topic routing
- Classification and threat model for acquisition-path distinctions and attacker prerequisites.
- PCIe devices for TLPs, configuration space, FPGA constraints, pcileech, and device emulation.
- IOMMU and defense for VT-d/AMD-Vi, ACS, ATS/PASID, domain assignment, hypervisors, and trust anchors.
- Detection and forensics for fingerprinting, evidence capture, Thunderbolt/USB4, and memory access.
- Acquisition and transport, assurance boundaries, and repository resources for focused evidence and source selection.
- Repository map when maintaining the collection.
Use windows-kernel-security for host driver and kernel internals. Apply game-security-research-rigor before turning architecture claims into findings.
Version History
-
4a52192
Current 2026-09-22 04:11
优化技能结构以适配GPT-6 Astra,修正过时的安全声明,恢复直接数据源并强化游戏安全技能的证据引用。
-
51e379d
2026-07-31 02:58
澄清了FPGA设计的行为及TLP格式中流量类型的影响
-
c7ff340
2026-07-19 14:07
优化了Wiki结构并增强了自动化功能。
- f65b5b3 2026-07-05 12:04


