USENIX Security '26 Artifacts: Breaking the Boundaries: Analyzing QUIC Frame-Packet Interactions With QUIC-Attacker

Overview In this repository, we release the full implementation of QUIC-Attacker (01-QUIC-Attacker.zip) as well as the framework containing the complete set of test cases used in our evaluation (02-Test-Suite.zip). We additionally release the QUIC-Docker-Library, which provides Docker images for all evaluated QUIC libraries across multiple versions (03-QUIC-Docker-Library.zip). All released projects are made available under an open-source license. In addition to these artifacts, we also include the proof of concept exploit for Alibaba's XQUIC implementation (04-PoC-XQUIC.zip). The archive artifact_experiments.zip contains several scripts for executing the experiments described in our artifact appendix. The released artifacts provide a comprehensive foundation for reproducing our results, extending our analyses, and supporting further research on QUIC implementations. Notes on Reusability We contribute QUIC-Attacker as part of the TLS-Attacker suite (https://github.com/tls-attacker/TLS-Attacker). Our extensions have been merged and released. We also provide the QUIC-Docker-Library on GitHub (https://github.com/tls-attacker/QUIC-Docker-Library). Both projects will be maintained and extended in their respective repositories. For updates, please refer to the GitHub repositories.