Arget retweeted
Four years, countless PCB revisions, and one custom FPGA controller later: a 60fps, 300ppi, open-source E Ink monitor is finally real.
youtube.com/watch?v=nHbA2-_q…
Arget retweeted
Comenzamos con la charla "Grabación de llamadas en Android: Una perspectiva ofensiva" con Yago Gutiérrez, donde entenderemos el funcionamiento del sistema de audio en Android #MobileEnv #Malware #Reversing #ESCVIII @arget1313
Arget retweeted
No te puedes perder a nuestro siguiente ponente Yago Gutiérrez y su charla "Grabación de llamadas en Android: Una perspectiva ofensiva" en la próxima EuskalHack Security Congress VIII @arget1313 #ESCVIII securitycongress.euskalhack.…
Arget retweeted
just finished a new blogpost on how i exploited the V8 javascript engine at a CTF!
it's a beginner friendly journey from a memory corruption to a browser pwn, and features lots of cool CSS to help you understand various concepts along the way.
have fun!!
lyra.horse/blog/2024/05/expl…
Arget retweeted
I've audited the Android kernel in late 2023, and reported 10+ kernel bugs to Google, along with 2 exploits. Today, I'm releasing the first exploit, targeting the Mali GPU on Pixel devices, accessible from an untrusted_app context.
github.com/0x36/Pixel_GPU_Ex…
Arget retweeted
The urge to name and shame a company that ghosts you after 6 rounds of interviews is VERY STRONG!
Arget retweeted
Back at DEFCON 31 there was a great talk from @hacktricks_live and @arget1313 on hacking distroless containers. I wrote up a blog explaining what the attack is and what it means for users of distroless containers.
chainguard.dev/unchained/und…
youtu.be/poHirez8jk4?si=-cUa…
Arget retweeted
Just watched a really great talk on, essentially, file-less in-memory code execution in read-only noexec partitions of distroless/rootless containers from @hacktricks_live and @arget1313 from their @defcon 31 talk. Definitely give it a watch! youtu.be/poHirez8jk4
Arget retweeted
Got to hang with @hacktricks_live and @arget1313 to hear all about their DEFCON presentation & latest research -- "ddexec", tooling to run shellcode and binaries in memory and bypass read-only filesystem protections or distroless environments 😱 SUPER COOL youtu.be/7dc29U9DeIE
Arget retweeted
Awesome talk of @arget1313 at HackTricks Track in @rootedcon 2023 about stealthiness in Linux titled: Stealth intrusions with DDexec-ng & in-memory dlopen()
Don't miss it: youtube.com/watch?v=VM_gjjiA…
#hacktricks
Arget retweeted
Find a summary of the talk @arget1313 and Carlos gave at DEFCON in book.hacktricks.xyz/linux-ha… and slides in
docs.google.com/presentation…
Talk title: Exploring Linux Memory Manipulation for Stealth and Evasion
Enjoy!
Arget retweeted
I'll be giving a talk with @arget1313 at #defcon tomorrow Sunday at 1pm in track 4 about abusing Linux memory to bypass file system based protections and distroless envs.
The technique can also be used to execute anything in a very stealth way.
Don't miss it if you are around!
So I needed to compile a program with -nostdlib but also needed some form of dynamic memory but also I wasn't going to implement the shittiest malloc() because nobody wants that, and that's why I ended up doing the hackiest thing I've ever done in C (and it works perfectly fine):
























