ceax retweeted
Last week, we presented our research on Intel Wi-Fi chips at @sstic. Our talk and our slides are now available: sstic.org/2022/presentation/…. It features a demo of a DMA attack from the Wi-Fi chip! We also published our tools to interact with some Intel chips: github.com/Ledger-Donjon/int…
ceax retweeted
We wanted to create snapshot fuzzing demo. We also like challenges. So we chose a browser as the target :) You can find out what can go wrong from our latest blog post:
Fuzzy Snapshots of Firefox IPC -blog.silentsignal.eu/2021/10…
ceax retweeted
Super excited to release Unicorn2 beta to public!
Important features:
- Backward compatible with Unicorn 1.0.3
- Support latest instruction set of all existing archs
- Add 2 new archs in PPC & RISCV
- More optimization
More info at unicorn-engine.org/Unicorn2-…
ceax retweeted
Nicolas Delhaye @_Homeostasie_ & Flavian Dola @_ceax
"Making your own Stuxnet: Exploiting New Vulnerabilities and Voodooing PLCs"
🎞️ youtu.be/9PGyOyJTbrE
📜 drive.google.com/file/d/1_N0… (2.6MB)
💥 demos drive.google.com/file/d/1aDi… (32.6MB)
ceax retweeted
Kudos to @_ceax & @_Homeostasie_ from @AirbusCyber for showing that #Stuxnet is still possible by "Exploiting New Vulnerabilities and Voodooing PLCs" [#RomHack2021]. You put impressive work into that. m.youtube.com/watch?t=19664&…
ceax retweeted
Remote Code Execution (RCE) on the ABB #ICS system: “System 800xA SoftController” (CVE-2020-24672). This vulnerability could allow attackers to take remote control of the ABB engineering station. Details by @_ceax & @_Homeostasie_ at 3:40pm: bit.ly/3hDHE6N
ceax retweeted
At #RomHack2021, @_ceax & @_Homeostasie_ will demonstrate how one can gain remote control over some industrial devices exploiting several new #CVEs they discovered. They will explain how to reproduce key stages of a #Stuxnet -like attack. Live stream ➡️ bit.ly/2XqWk1u
ceax retweeted
Happy to present with my workmate @_ceax our vulnerability research around #ICS at the #RomHack2021 conference on September 25th. 🙂
"Making your own Stuxnet: Exploiting New Vulnerabilities and Voodooing PLCs"
➡️ romhack.io/speakers-2021.htm…
📢 #RomHack2021 Agenda & Speakers
We are happy to announce conference agenda & speakers
romhack.io/agenda
See you in Rome next 25th of September
(re-tweets appreciated)
Check the thread
⬇️ ⬇️ ⬇️
ceax retweeted
You liked Stéphane's blog posts on QEMU? (airbus-seclab.github.io/qemu…)
Join him tomorrow for this free @hardwear_io Webinar.
📽️In our next webinar 😎Stephane Duverger @Airbus will deep-dive into QEMU for security assessment
✅Register for the webinar➡️bit.ly/3id3uil
#QEMU #embedded #Fuzzing #hardwaresecurity #webinar #kernel
ceax retweeted
Présentation par @_ceax de l’outil github.com/airbus-cyber/afl_… permettant de fuzzer des binaires via AFL++ et l’émulateur de #Ghidra. Projet visant à être une alternative à afl_unicorn pour les architectures #CPU non supportées (Xtensa, ppc…): static.sstic.org/rumps2021/S…
ceax retweeted
Inside SimpliSafe Alarm System medium.com/tenable-techblog/…
ceax retweeted
Reverse Engineering Testo Saveris2 firmware
jon-cederqvist.medium.com/re…
ceax retweeted
i tried to make a beginner-friendly post about some of the basics related to code coverage in fuzzing, just going over terminology, common strats, and some tooling. hopefully this will be useful for some! h0mbre.github.io/Fuzzing-Lik…
ceax retweeted
LIVE TODAY AT 2PM CET: @_Homeostasie_ & @_ceax, #Vulnerability Researchers, will present at #GreHack20. Livestream available at youtu.be/Q5TpkHvPFqw
w/ @GrehackConf
ceax retweeted
[New Post] Here is my detailed write-up on both CVE-2020-26562 and CVE-2020-26871 affecting #Cybereason EDR. 🙂
Learn a little about #ZeroMq and find out why not catching exceptions harms a security product and makes it useless for detecting threats.
➡️ airbus-cyber-security.com/a-…
ceax retweeted
[Tool] Need remotely to figure out the build number of a Windows OS without any authentication. Port 135 is not filtered by the target. #RpcGetWinVersion is probably for you. Relying on Impacket, it can be useful during reconnaissance stages.
github.com/airbus-cyber/Cybe…
ceax retweeted
A few months ago, I wrote out a short post on an issue with the registry root names abbreviations (Event ID 12) of #Sysmon. Still there, a confusion between a size in characters and in bytes. Even if it seems harmless, still fun to spot such a bug. 😉
➡️ airbus-cyber-security.com/fr…
ceax retweeted
[New Post] Here is my detailed write-up on a LPE (CVE-2020-7523) affecting the Schneider Electric Modbus Serial Driver.
Find out how to abuse a shared memory and a local TCP port for getting an arbitrary file write as SYSTEM from a standard user. 😀
➡️ airbus-cyber-security.com/ab…
ceax retweeted
[SEVD_2020-224-01] Happy to see an available fix for my LPE (CVE-2020-7523) affecting the Schneider Modbus Serial Driver component. More than 10 Schneider products are concerned. Hope writing a new blog post around. Customers, update the new version! ;-)
xitter.cf/CERT_FR/status/1293185…
CERTFR-2020-AVI-493 : [SCADA] Multiples vulnérabilités dans les produits Schneider Electric (11 août 2020) cert.ssi.gouv.fr/avis/CERTFR…