# xoreaxeaxeax/skitter-creek-bath-salts

Unlocking _everything_ on the CPU with DRAM scrambling

Repository: https://github.com/xoreaxeaxeax/skitter-creek-bath-salts
Canonical: https://ross.abutalabs.com/products/skitter-creek-bath-salts
Language: C
License: MIT
License Family: permissive
Last push: 2026-08-13T16:59:41+00:00

## Health v2 (maintenance only)
Score: 56/100 (v2, computed 2026-09-02T17:46:02.011165+00:00)
- activity 97, release rhythm 35, longevity 1
- inputs: {"age_days": 20, "days_push": 20, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: no_releases, young
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 1937, forks 156 (observed 2026-08-28T04:05:56.925550+00:00)

## What it is
A security research tool written in C that reprograms AMD Family 16h DRAM controller address translation registers to scramble physical memory mappings. By breaking the DRAM address translations, it exposes protected memory carveouts and unlocks platform primitives such as the Platform Security Processor, System Management Mode, C6 DRAM, and CPU microcode.

## Use cases
- unlock the AMD Platform Security Processor on supported hardware
- access protected DRAM regions invisible to the kernel
- research DRAM controller address translation behavior
- dump and modify CPU microcode and SMM memory
- study low-level memory hierarchy security on AMD Family 16h CPUs
- explore hardware security boundaries below the OS

## When to choose
- you are doing hardware/firmware security research on AMD Family 16h (Kabini/Jaguar-era) CPUs
- you need to inspect or unlock protected DRAM carveouts like PSP or SMM memory
- you want a documented reference implementation of DRAM address translation attacks

## When to avoid
- you have a modern AMD Family 17h+ CPU or non-AMD hardware, as it is untested and likely unsupported
- you need a production security tool rather than a research exploit
- you are not comfortable running bare-metal code that can brick or destabilize your platform

## Facets
- artifact type: cli-tool
- maturity: experimental
- function: security, reverse-engineering
- domain: security, hardware, developer-tools
- platform: cli, cpp
- tags: dram-scrambling, hardware-exploitation, amd, firmware-security, memory-controller, platform-security-processor, smm, microcode, security-research, linux

## Member repositories
- xoreaxeaxeax/skitter-creek-bath-salts (main) score 56

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:05:56.925550+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T03:08:25.141680+00:00, confidence not recorded.
  - readme: https://github.com/xoreaxeaxeax/skitter-creek-bath-salts (fetched 2026-08-28T04:05:56.925550+00:00, sha 6d6d3cd53547)
- Data as of 2026-08-30T08:39:29.467469+00:00.