@commial

InfoSec R&D

 Paris
ajax.re
Joined July 2010
  • Tweets235
  • Following306
  • Followers1.3K
17Media
#Miasm, the reverse engineering framework in Python, has a new home: github.com/cea-sec/miasm ! Asm/Dis, IR translation, Emul, Symbolic exec…

GitHub - cea-sec/miasm: Reverse engineering framework in Python

Reverse engineering framework in Python. Contribute to cea-sec/miasm development by creating an account on GitHub.

github.com
48
1
56
Ajax retweeted
SSTIC@sstic24 Dec 2024
Nous sommes à la recherche de volontaires pour réaliser le challenge SSTIC 2025 ! Si vous êtes intéressé vous pouvez retrouver les informations pour nous contacter sur sstic.org/ ! Bonne fêtes ☃️
19
17
2,707
github.com/commial/experimen… Little experiment about reusing Windows Defender built-in unpackers, mostly for fun (based on the very useful @taviso's loadlibrary)
2
29
81
9,747
Even if it works for some (old) commercial packers, it seems that nowadays malware authors prefer one-time & custom packers... So likely not that useful, but still fun to make 🤷
2
478
Ajax retweeted
SSTIC@sstic29 Mar 2024
The SSTIC challenge 2024 is now opened and english friendly! You can find it here : sstic.org/2024/challenge! Good luck!
26
29
6,684
Do you wish Time Travel Debugging was faster and more lightweight? Our latest version lets you decide exactly what you want recorded! Select modules to record or use the API for full control. Get your recording just the way you like it. Crusts optional. aka.ms/ttd
3
25
5
79
53,716
Write up of the HVCI bypass vuln (CVE-2024-21305) with @aall86 ! tandasat.github.io/blog/2024…
4
115
3
289
50,582
L’@ANSSI_FR lance #Hackropole 🏛 une plateforme regroupant la quasi-totalité des épreuves du France Cybersecurity Challenge #FCSC. 🇫🇷 🏆 Une centaine d’épreuves est déjà disponible ! 💪 🚀Rendez-vous dès maintenant sur : cyber.gouv.fr/actualites/lan… #ANSSI #numérique #FCSC #ECSC
1
167
7
444
51,614
First big result from our new CPU research project, a use-after-free in AMD Zen2 processors! 🔥 AMD have just released updated microcode for affected systems, please update! lock.cmpxchg8b.com/zenbleed.…
34
649
62
1,744
339,430
Honored to be invited to speak at @sstic today. Stream my talk “Deep Attack Surfaces, Shallow Bugs” here: streaming.sstic.org/
7
37
3
217
36,992
Ajax retweeted
SSTIC@sstic12 Apr 2023
La billetterie de SSTIC 2023 ouvrira demain, le 13 avril à 10h00. Retrouvez les instructions sur sstic.org/2023/news/inscript…
1
14
1
23
6,872
A short🧵 detailing a Kerberos LPE I discovered while working with @tiraniddo on our BlackHat research. msrc.microsoft.com/update-gu… (CVE-2023-21817) This was fixed in Feb, but I think some will find the vulnerability & exploitation interesting. 1/
2
117
1
240
48,092
Ajax retweeted
SSTIC@sstic30 Mar 2023
Le challenge sera publié ce vendredi 31 mars à 19h00, heure de Paris à l'adresse suivante : sstic.org/2023/challenge/ À vos marques !
26
38
7,258
Ajax retweeted
SSTIC@sstic22 Mar 2023
Le programme est disponible : sstic.org/2023/programme/ ! La billetterie ouvrira dans les prochaines semaines.
35
1
34
7,939
If you use @obsdmd for your #pentest / #redteam or #threatintel notes, you might be interested in the IVRE community plugin for #Obsidian, that uses data from IVRE to enrich your notes. Get it from Obsidian (in community plugins, look for "ivre") or see github.com/ivre/obsidian-ivr…
Obsidian graph view highlighting connections from the thunderbird.net domain

ALT Obsidian graph view highlighting connections from the thunderbird.net domain

Obsidian note generated by the IVRE plugin for an IP address used by the domain 1password.com

ALT Obsidian note generated by the IVRE plugin for an IP address used by the domain 1password.com

Obsidian note generated by the IVRE plugin for the domain 1password.com

ALT Obsidian note generated by the IVRE plugin for the domain 1password.com

1
4
1
6
1,421
Ajax retweeted
SSTIC@sstic2 Jan 2023
Comment bien commencer la nouvelle année ? En soumettant à SSTIC ! Vous avez jusqu'au 30 janvier. Toutes les infos : sstic.org/2023/cfp/
22
16
5,208
My first blog post about analyzing windows defender is out! Fuzzing the Shield: CVE-2022–24548 - medium.com/s2wblog/fuzzing-t…

Fuzzing the Shield: CVE-2022–24548

Author: Daejin Lee, Seunghoe Kim, Donguk Kim, Eugene Jang

medium.com
2
178
5
473
The results are out! We are very honoured to have won first place🥇in the Hex-Rays plugin contest 2022 🎉 Our entry was "ttddbg", a time-travel debugging plugin for IDA already presented at #SSTIC 2022. Many congratulations to all the other entrants!
Hex-Rays SA
@HexRaysSA27 Sep 2022
🥁 We have the winners of the Hex-Rays Plugin Contest 2022! Our congratulations go to: 🥇 ttddbg by @simsor and @citronneur 🥈 ida_kcpp by Uriel Malin and Ievgen Solodovnykov 🥉 FindFunc by Felix B. Take a look at the full list: hex-rays.com/contests_detail… #PluginContest #IDA
6
21
62
New release of github.com/commial/ttd-bindi…, featuring more API wrapping (thanks @citronneur), and new examples: coverage (LightHouse compatible) and a trace producer for the awesome Tenet plugin (cc @gaasedelen)
Loading a TTD trace into IDA Tenet

ALT Loading a TTD trace into IDA Tenet

Viewing a TTD trace coverage with IDA LightHouse

ALT Viewing a TTD trace coverage with IDA LightHouse

1
16
53
Time Travel Debugging for #IDA !!! github.com/airbus-cert/ttddb… #SSTIC. Thanks @commial !!!

GitHub - airbus-cert/ttddbg: Time Travel Debugging IDA plugin

Time Travel Debugging IDA plugin. Contribute to airbus-cert/ttddbg development by creating an account on GitHub.

github.com
2
100
3
236
After 3 years of development, today we proudly announce & celebrate the first release of a new hypervisor-based user-mode & kernel-mode debugger, @HyperDbg. 🎉 As an alternative to #Windbg, HyperDbg is mainly built for analyzing, reversing, and fuzzing! github.com/HyperDbg/HyperDbg
19
280
12
739
Load more