NighterMan retweeted
"... IOActive has demonstrated that data bits stored in the example antifuse memory can be extracted using a well-known semiconductor failure analysis technique..." Our latest blog highlights this technique used in the RP2350 Challenge from @Raspberry_Pi. ioactive.com/raspberry-pi-23…
NighterMan retweeted
This is awesome!
#Linux #kernel #CVE #exploit analysis report and relative debug environment. You don't need to compile Linux kernel and configure your environment anymore.
github.com/bsauce/kernel-exp…
NighterMan retweeted
uploaded my last stream - Android / Linux kernel SLUB aliasing, ie when special-purpose caches get merged with general-purpose kmalloc caches. hope it will be useful youtube.com/watch?v=5-eRsA0l…
NighterMan retweeted
centos 8 / rhel 8 / ubuntu 14.04, 16.04, 18.04 poc is uploaded github.com/duasynt/xfrm_poc. The tech report is public too duasynt.com/pub/vnik/01-0311…
NighterMan retweeted
My write-up covering @offensive_con talk!
CVE-2019-18683: Exploiting a Linux kernel vulnerability in the V4L2 subsystem
a13xp0p0v.github.io/2020/02/…
@offensive_con slides: a13xp0p0v.github.io/img/CVE-…
PoC exploit demo video: youtube.com/watch?v=mb4YHyLy…
Enjoy!
NighterMan retweeted
What? A library that wraps IDA decompiler API and makes it usable? *and* documented?
We just released a thing.
Blog: fireeye.com/blog/threat-rese…
Github: github.com/fireeye/FIDL
Docs!!!: fidl.readthedocs.io/en/lates…
NighterMan retweeted
I know a lot of people will be delighted by this: We are releasing CodeQL for FREE for OSS and Academia. We also have a new VSCode extension: securitylab.github.com/tools…
NighterMan retweeted
So here it is, the first SigDigger release: github.com/BatchDrake/SigDig…
There is probably a bunch of bugs and glitches, but it should be usable. Anyone in the mood to build it? :D
NighterMan retweeted
My talk is already public: youtube.com/watch?v=6kYylH6f…
NighterMan retweeted
Slides from my talk: vwzq.net/slides/2019-sp_evic…
NighterMan retweeted
TIL: You can find SunOS 4.1.x, Solaris 2.6, Ultrix 4.3, IRIX 6.5.5, AIX 4.1.3 and OSF/1 1.0 source trees on archive.org: archive.org/download/various…
My 16yo self is rejoicing with joy.
NighterMan retweeted
Slides for my "Coverage-guided USB Fuzzing with Syzkaller" talk @offensive_con docs.google.com/presentation…
NighterMan retweeted
In response to @Zerodium's recent MikroTik tweet, I put some of my RouterOS bug hunting experience in writing: medium.com/tenable-techblog/… #BugBounty
NighterMan retweeted
Primeros ponentes confirmados de RootedCON 2019
rootedcon.com/noticias/prime…
#rootedcon #rooted2019
NighterMan retweeted
unauth, unassoc remote code exec on the Marvell Avanstar Wifi chip SoC used in Playstations, Xbox, Surfaces, Chromebooks, Samsung phones and more in under five minutes attack time. Bonus second stage escalation in the linux drivers, PoC on steamlink.
2018.zeronights.ru/wp-conten…
NighterMan retweeted
Linux kernel v4.20 has been released! I'm excited about the stackleak plugin, better kernel memory access faults for improved fuzzing, spectre v2 userspace mitigations, jump labels getting switched to read-only, and the end of VLAs (*whew*)! outflux.net/blog/archives/20…




















