Got my first CVE (CVE-2024-41908) during my Master's project on fuzzing. The affected product, Siemens NX, has an out-of-bounds read vulnerability (CVSS 7.8).
Given the complexity and the size of the app, it was my biggest challenge so far.
Details here : cert-portal.siemens.com/prod…
Clooope retweeted
I just pushed out wtf v0.5.5 where you can now generate full execution traces with both hypervisor backends (winhv & KVM) 🔥🔥
This should hopefully greatly help people debug their setup 🪄
github.com/0vercl0k/wtf/rele…
Clooope retweeted
ALT Fake SMS someone spending 15k, "babe" thinks it's a ring (wedding). THen SANS logo
Clooope retweeted
#BreizhCTF2024
Un CTF avant le CTF !
Les élèves s’essaient aux challenges concoctés par les étudiants du Pôle Sup de la Salle de Rennes !
Clooope retweeted
Take the time to read our new #PluginFocus article. In this blog post, Arnaud Gatignol (@_anyfun) and Julien Staszewski (@_0perator) from the @thalium_team introduce ida kmdf, a tool that helps with your KMDF driver analysis. Read more 🌐 hex-rays.com/blog/plugin-foc…
#idapro
ALT Plugin Focus – ida kmdf
Clooope retweeted
If you've ever wanted to live debug user mode Linux processes (e.g.: in WSL) from WinDbg, with 1.2402.24001.0, you can! Start up a gdbserver in WSL (e.g.: gdbserver localhost:1234 ./vim) and connect to it via WinDbg's "Connect to remote debugger"
Clooope retweeted
There is now a programmatic way for you to record slices of execution with TTD in your own application 🔥
Check out the LiveRecorderApiSample that demonstrates how to use the API:
github.com/microsoft/WinDbg-…
Do you wish Time Travel Debugging was faster and more lightweight? Our latest version lets you decide exactly what you want recorded! Select modules to record or use the API for full control. Get your recording just the way you like it. Crusts optional. aka.ms/ttd
Clooope retweeted
I'm happy to announce the release of HyperDbg v0.8! ✨🎉
github.com/HyperDbg/HyperDbg
In this version, we introduce a new event command called "!mode" which is able to detect transitions between user-mode <> kernel-mode.
More information:
docs.hyperdbg.org/commands/e…
Clooope retweeted
Exploiting a heap based overflow to achieve pre-authentication RCE in Fortinet VPN
Credits @bishopfox
bishopfox.com/blog/building-…
#cybersecurity #fortinet
Clooope retweeted
VMProtect Source Code (Leaked 07.12.2023)
github.com/jmpoep/vmprotect-…
Clooope retweeted
Be prepared to lose your kernel pointers! Windows will soon start restricting KASLR leaks to non-admins: windows-internals.com/kaslr-…
(mentioned this here before but figured it's worth a blog post)
Clooope retweeted
Trying to learn security research and getting overwhelmed by all the details?
I just published a guide showing my process for step-by-step analysis of a security feature: windows-internals.com/an-exe…
Clooope retweeted
A few weeks ago I ported my Windows user-mode crash dump parser to Rust for another project 🦀
Go try it out and let me know what you think 🙏🏽
github.com/0vercl0k/udmp-par…
Clooope retweeted
Sharing our slides for Typhooncon 2023: "Exploiting vulnerbilities in ESXi". github.com/edwardz246003/pre…
Clooope retweeted
Looks like there is a new snapshot-based fuzzer in town. It's also super-well documented.
* github.com/awslabs/snapchang…
* aws.amazon.com/blogs/opensou…
Clooope retweeted
Solidify your understanding of virtualization technology and hypervisor implementations for reversing, fuzzing, tooling or your low-level thirst!
tandasat.github.io/
The 4-day long remote class with in-depth discussions and hands-on exercises in the comfort of your home🏠
Excited to announce that my next remote class is on Nov 27-28 and Dec 4-5 (4 days). Checkout details at tandasat.github.io/. Registration is open!
It is an unique opportunity to quickly learn Intel VT-x, -d, -rp and UEFI by writing a lightweight hypervisor together.