UNIX enthusiast

Spain
Joined May 2010
"... IOActive has demonstrated that data bits stored in the example antifuse memory can be extracted using a well-known semiconductor failure analysis technique..." Our latest blog highlights this technique used in the RP2350 Challenge from @Raspberry_Pi. ioactive.com/raspberry-pi-23…
3
9
892
NighterMan retweeted
The year of "re-hosting your favorite firmware target on QEMU and fuzzing it".
1
56
4
198
uploaded my last stream - Android / Linux kernel SLUB aliasing, ie when special-purpose caches get merged with general-purpose kmalloc caches. hope it will be useful youtube.com/watch?v=5-eRsA0l…
11
67
centos 8 / rhel 8 / ubuntu 14.04, 16.04, 18.04 poc is uploaded github.com/duasynt/xfrm_poc. The tech report is public too duasynt.com/pub/vnik/01-0311…
5
102
1
201
My write-up covering @offensive_con talk! CVE-2019-18683: Exploiting a Linux kernel vulnerability in the V4L2 subsystem a13xp0p0v.github.io/2020/02/… @offensive_con slides: a13xp0p0v.github.io/img/CVE-… PoC exploit demo video: youtube.com/watch?v=mb4YHyLy… Enjoy!
2
202
4
439
What? A library that wraps IDA decompiler API and makes it usable? *and* documented? We just released a thing. Blog: fireeye.com/blog/threat-rese… Github: github.com/fireeye/FIDL Docs!!!: fidl.readthedocs.io/en/lates…
3
169
2
377
I know a lot of people will be delighted by this: We are releasing CodeQL for FREE for OSS and Academia. We also have a new VSCode extension: securitylab.github.com/tools…
1
48
1
128
So here it is, the first SigDigger release: github.com/BatchDrake/SigDig… There is probably a bunch of bugs and glitches, but it should be usable. Anyone in the mood to build it? :D
3
12
27
NighterMan retweeted
My talk is already public: youtube.com/watch?v=6kYylH6f…
7
22
NighterMan retweeted
Slides from my talk: vwzq.net/slides/2019-sp_evic…
1
7
21
NighterMan retweeted
TIL: You can find SunOS 4.1.x, Solaris 2.6, Ultrix 4.3, IRIX 6.5.5, AIX 4.1.3 and OSF/1 1.0 source trees on archive.org: archive.org/download/various… My 16yo self is rejoicing with joy.
4
47
2
125
In response to @Zerodium's recent MikroTik tweet, I put some of my RouterOS bug hunting experience in writing: medium.com/tenable-techblog/… #BugBounty
3
167
4
296
NighterMan retweeted
we have updated our payout table for Pwn0rama #pwn0rama #coseinc
1
6
NighterMan retweeted
Primeros ponentes confirmados de RootedCON 2019 rootedcon.com/noticias/prime… #rootedcon #rooted2019
15
15
NighterMan retweeted
unauth, unassoc remote code exec on the Marvell Avanstar Wifi chip SoC used in Playstations, Xbox, Surfaces, Chromebooks, Samsung phones and more in under five minutes attack time. Bonus second stage escalation in the linux drivers, PoC on steamlink. 2018.zeronights.ru/wp-conten…
12
548
48
896
NighterMan retweeted
Linux kernel v4.20 has been released! I'm excited about the stackleak plugin, better kernel memory access faults for improved fuzzing, spectre v2 userspace mitigations, jump labels getting switched to read-only, and the end of VLAs (*whew*)! outflux.net/blog/archives/20…
3
56
3
160