programming & hardware & security 🦆 Pretending I know what I'm doing at @stm_cyber. Playing CTFs for @p4_team.
Poland
Joined May 2012
- Tweets218
- Following540
- Followers437
- Likes921
Bonus retweeted
Now live: a GUI for Step CA that allows to visualize all issued certificates; it also allows to create "invitations" to easily onboard (even non-technical) people onto your private CA through a friendly web-based flow.
GitHub icedevml/tinypki:
github.com/icedevml/tinypki
Bonus retweeted
‼️At the end of last year, there was a series of coordinated attacks in Polish cyberspace.
📌Today, our team is publishing a report describing the technical analysis of these events. We show the scheme of operation and the tools used by the attackers.
➡️cert.pl/uploads/docs/CERT_Po…
Bonus retweeted
Gamers express concern over anti-cheats and assert them to be spyware running as "root" on Windows.
Malware doesn't need to be ran at an elevated privilege (especially "root") to achieve it's objective of exfiltrating sensitive information or "spying" on you by watching what you're doing.
All of this can be achieved easily from user mode and can (usually) work even in restricted environments.
tl;dr these large game publishers don't need an anti-cheat to spy on you. They can do it easily from user mode.
Bonus retweeted
RULECOMPILE - Undocumented Ghidra decompiler rule language. A blog post about how frustration with poor decompilation led me to dive deep into Ghidra's decompiler to discover (and reverse-engineer) - an obscure, undocumented DSL
msm.lt/re/ghidra/rulecompile…
#reverseengineering #ghidra
ALT A image that shows a piece of code. On top there is an expression (param_1 & 1) * 2 + (param_1 ^ 1). On the bottom is a deobfuscated version, param_1 + 1. In the middle there is a custom Ghidra DSL, explained in the post.
Bonus retweeted
"Memory safety is a very small part of security."
-- C++ Committee submission to DOE laying out the language's memory safety strategy.
It's not a long document. Give it a read.
downloads.regulations.gov/ON…
Lesson learned. Yes, it's cool to help open source hardware projects. But waiting 1.5 years with no end in sight is just unacceptable. Wish I could cancel my orders and order one-off from JLC on my own. Hope this saves time for those who would consider buying from crowdsupply.
I did a thing :)
We are releasing the first wave of vulnerabilities targeting @paxtechnology PAX Android POS terminals.
The list includes pre-auth RCE on the root account by exploiting a hidden bootloader functionality via USB.
You can expect more POS CVEs soon™ :)
blog.stmcyber.com/pax-pos-cv…
Bonus retweeted
[PL] Oprócz Paged Out!, wypuściliśmy dzisiaj też wywiad z 𝗣𝗼𝗹𝗮𝗻𝗱 𝗖𝗮𝗻 𝗜𝗻𝘁𝗼 𝗦𝗽𝗮𝗰𝗲, tj. (@p4_team + @DragonSectorCTF + przyjaciele) o HACK-A-SAT 4:
↓↓↓
youtube.com/watch?v=9Gl8ZZDb…
↑↑↑
We managed to win yet another space-related CTF, this time organized by @esaoperations. We managed to join forces with 2 great hackers from @HPI_DE, to form a 🇵🇱🇩🇪 team.
🛰️ 🔫 🦆
It's 2075 and a cyber attack has cut off all communication with the Mars Research Station😲
Yesterday, eight teams from across Europe came to ESA's #MissionControl in Darmstadt, Germany, to take charge and protect the station🔴🛡️.
Their mission was to take control of small (and pretty cute) rovers to navigate through a maze and repair malfunctioning systems while protecting their rovers from cyber attacks (coming from the other teams😏🤖).
The #PwnTheRover contest offers real-world #cybersecurity scenarios, putting contestants' abilities to the test and inspiring young generations.
🏆 Stay tuned for the grand reveal of the winning teams!
🤝In collaboration with @FraunhoferSIT and @ATHENECenter✨
