I enjoy playing with hardware and network protocols, especially with IEEE 802.11. @6e726d@infosec.exchange
Buenos Aires
Joined April 2010
- Tweets1.3K
- Following92
- Followers987
- Likes2.1K
Andrés Blanco retweeted
It's BlackHat/DEF CON week so I'd like to interrupt your regularly scheduled chest drumming feed! Let's talk about a critical WiFi 7 memory corruption bug. The flaw was in Hostapd, the userland daemon which powers the world's WiFi on the majority of access points. I reported this in June and it's now patched upstream.
My proof of concept shows that authenticated clients can bypass ASLR to leak pointers OTA and inject code execution. 802.1X Enterprise WiFi 7 is basically exploitable pre-auth because of the "outer tunnel".
This bug was missed by LLM scans as well as human auditors, but found in the wifi gauntlet.
If you're at BH/DC this week and interested in the memory safe wifi stack we're building please reach out
Interested in Wi-Fi vulnerabilities? Heading to @defcon?
Don’t miss the talk on Ubiquiti AirMax by @fede_k and @GastonAznarez. If wireless security is your thing, this is one to add to your schedule.
defcon.org/html/defcon-34/dc…
Andrés Blanco retweeted
Por primera vez en más de 40 años, ¡traemos “WarGames” de vuelta a la pantalla grande! 🤯
🍿 Te invitamos a revivir esta joyita del cine que marcó a toda una generación hacker. Y además, empezamos juntos la cuenta regresiva para la EKO 2025, obvio.
📅 ¿Cuándo? El viernes 22 de agosto a las 18:30HS
📍 ¿Dónde? En Cinepolis Plaza Houssay - Av. Córdoba 2135, C1121 Cdad. Autónoma de Buenos Aires
📣 Importante: Te recomendamos llegar puntual para no quedarte afuera.
🎫 La capacidad es limitada, ¡inscribite ahora y reservá tu lugar! >> lu.ma/ekoparty-noche.de.cine
Andrés Blanco retweeted
Just dropped a blog post on reproducing a known voltage glitching attack to bypass APPROTECT on the nRF52840! 😎 Spent hours soldering & debugging to get it right. Not novel, but a messy journey—check it out: matiassoler.com/posts/approt…
Andrés Blanco retweeted
Hello friends. Check out this awesome and unique role that just opened up on my team in SEAR. Wanna secure Apple silicon, ROMs, iBoot, and more? jobs.apple.com/en-us/details…
Andrés Blanco retweeted
XBOW is now the top hacker in the US on @Hacker0x01 !
Andrés Blanco retweeted
We're piloting a new invite-only bug bounty for Quest devices and seeking 1-3 experienced researchers (AOSP experience a plus) for a 6-month participation. The scope will focus on RCE/EOP vulns & exploits.
There will be special incentives on top of the regular bounty payouts, including direct support from Meta security engineers.
Interested? Apply with your published writeups and CVEs by filling out this form: forms.gle/SnTyh7Bh7JgFCt4bA
The complexity of the IEEE 802.11 protocol standard continues to increase. In my view, overly complex protocol standards often create more problems than they solve.
Andrés Blanco retweeted
autogdb.io working with binaryninja on an single ASAN output, of a sophisticated framework.
Andrés Blanco retweeted
Vibe debugging via MCP for WinDBG crash analysis:
github.com/svnscha/mcp-windb…
Relevant blog:
svnscha.de/posts/ai-meets-wi…
Andrés Blanco retweeted
We’re hiring Vulnerability Researchers at @infosectcbr that specialise in Linux, OS kernels, Android, and embedded/IoT. With a world class hardware lab, come join our friendly and collaborative team, focusing on research against leading technologies. DM for details.
Andrés Blanco retweeted
DYLD improvements:
• Much faster loading (4.5 min → 15 sec in one sample!)
• Load images + dependencies with one click
• Better Obj-C + msgSend support
• Symbol demangling via LLVM
• Pointer resolution + stability rewrites
• Refreshed docs for triage workflows
Andrés Blanco retweeted
Announcing Binary Ninja 5.0! Today we're proud to announce the release of Binary Ninja 5.0 (Gallifrey). Here's some highlights: Union Support, Dyld Share Cache & Kernel Cache, Firmware Ninja, Auto Stack Arrays, Stack Structure Type Propagation, and so much more. Check out the blog post for more information: binary.ninja/2025/04/23/5.0-…
Andrés Blanco retweeted
The final episode of our new video series for Meta Quest Firmware Analysis is up! 😎
We started right from the basics and in this episode, we go through a real-world demo of reversing the firmware on a Quest 2 device.
youtu.be/6rAoBRxOrKI?feature…
Andrés Blanco retweeted
Investigating an "evil" RJ45 dongle: lcamtuf.substack.com/p/inves…
Andrés Blanco retweeted
It's known that we got hired by Raspberry Pi to try to hack the RP2350 - and now, as the hacking challenge has come to an end, we can also share that we succeeded in doing so!
Last year, @Raspberry_Pi hired us to test the security of the RP2350 - and using electro-magnetic fault-injection we were able to successfully bypass the OTP security measures!
This allowed us to read and modify the OTP locks, essentially bypassing the RP2350 secure-boot.
Andrés Blanco retweeted
Security through transparency: all chips have vulnerabilities, and most vendors' strategy is not to talk about them. In contrast, we aim to find and fix them.
Read the results of our RP2350 Hacking Challenge: rpltd.co/rp2350-challenge-up…
