Direct Memory, Access Everywhere

DMA vulnerabilities are not new, and most systems are still open to them because the attacks are treated as difficult and testing is weak. Epic Erebus is a small portable tool for those attacks. It is an open PCIe implementation with control over Transaction Layer Packets, so the bus and the DMA mitigations can be inspected. The talk covers what Erebus can do, how to use it, and what to check when DMA mitigations are configured.