Danny Quist retweeted
Regarding CVE-2024-38063 IPV6 RCE in Windows...
After reading RFCs about optional headers in IPv6 packets, I managed to create POC to cause a crash. The bug check in this case isn't too detailed, but essentially the underflow creates a large value used in a loop which eventually write data out of bounds and causes a crash.
I imagine this can be weaponized using heap massaging techniques and corrupting adjacent objects in the heap.
As many have already stated before, this can easily be mitigated by applying the latest patches or disabling IPv6 (which is enabled by default).
Danny Quist retweeted
Very excited to share that I will be giving a keynote speech at REcon, where I will be looking back on 30 years of decompilation from my own experience. Join me in celebrating 🎉 this milestone achievement! #REcon #decompilation #keynotespeaker
Marking the 30th anniversary of her PhD Thesis on “Reverse Compilation Techniques”, the Mother of Decompilation, Cristina Cifuentes @criscifuentes, will be the keynote speaker of the Recon 2024 conference. Come celebrate with us at Recon Montreal in June! recon.cx
Danny Quist retweeted
BianLian toolchain reverse engineering, analysis of the target and more. It was amazing to be part of the team writing this report redacted.link/7yl
Danny Quist retweeted
I'm confused by some of the mistakes the decompilation makes. I would have thought it would be easy to learn that it should copy the name of the function into the output, but it almost never does.
Danny Quist retweeted
Really, sincerely hoping that this means my students won't have to live under the threat of deportation for the next four years at least :)
Danny Quist retweeted
Ghidra's extensibility is jaw-dropping. Today I needed the pcode to model the x86 parity flag, which it doesn't do by default. 30 minutes and a 35-line patch to ia.sinc later, I can proceed. No other tool even comes close to how easy that was. (diff: github.com/RolfRolles/Ghidra… …)
Danny Quist retweeted
Win at defense by cheating! Come see my first talk in 3’ish years @cactuscon cactuscon.com/danny-quist/
Danny Quist retweeted
Let's rent a booth at RSA, place a few good vuln researchers there and challenge vendors to drop their products off at the booth.
Danny Quist retweeted
We can debate the morality of ad-blocking after we address the for-profit malware distribution platforms known as "online advertisers."
Danny Quist retweeted
If I were minister of magic I would commission a children's book to discredit any observed magic @jk_rowling she knows too much
Danny Quist retweeted
b00m...this just happened. Fuck you kids pretending to be DPRK...#stonerlivesmatter #sony
Danny Quist retweeted
#AppleEvent #iPhone6 #Apple Apple has very strange way of telling the world they're going out of business.
Danny Quist retweeted
@rygorous Money quote: "You think of a disk as a block device. It's actually a computer talking to yours over a network". Hilarity ensues :)
Danny Quist retweeted
Recruiter: "I've reviewed your profile and surmised that you do indeed, have a pulse, and you'd be perfect for this role."
Danny Quist retweeted
..it's not much, but really, anything that doesn't have a bounty these days can't be trusted
Danny Quist retweeted
RT @ieeevis VizSec (Symposium on Visualization for Cyber Security) will take place at #VisWeek. Check it out >> vizsec.org/