README.md

metadata

tags:
  - security
  - proof-of-concept
  - protobuf
license: mit

Protocol Buffers Api methods materialization DoS PoC

This repository contains a benign security research PoC for a .pb artifact that drives repeated-message materialization during api_pb2.Api.ParseFromString(...).

Files:

• control_one_method.pb
• malicious_methods_500000.pb
• reproduce.py