Danny retweeted
Here are the slides from the "Attacking JavaScript Engines in 2022" talk by @itszn13 and myself @offensive_con. It's a high-level talk about JS, JIT, various bug classes, and typical exploitation flows but with lots of references for further digging! saelo.github.io/presentation…
Danny retweeted
Today we're publishing a detailed technical writeup of FORCEDENTRY, the zero-click iMessage exploit linked by Citizen Lab to the exploitation of journalists,
activists and dissidents around the world. googleprojectzero.blogspot.c…
Danny retweeted
The schedule for #Pwn2Own 2021 is live! Check out all of the attempts set for the next 3 days. We'll be updated the schedule with results as we get them. zerodayinitiative.com/blog/2…
Danny retweeted
It's been a while since I wrote anything so I wrote an article on how to discover the entire x86-64 instruction set in seconds including any hidden instructions and learn their basic properties while on it. There were some pretty interesting results!
blog.can.ac/2021/03/22/specu…
Danny retweeted
🐋 How Netflix secures their containers using User Namespaces ("rootless containers")
Great overview of the problem space + a discussion of how their architecture has changed over time
by @fabiokung @sargun @aspyker @heliousc6 @anwleung et al
netflixtechblog.com/evolving…
Danny retweeted
A nimble robot dog: Meet A1, a lifelike four-legged robot that can tumble and run as fast as a man. #tradefair
Danny retweeted
"Hacking Starbucks and Accessing Nearly 100 Million Customer Records" - write up on a recent directory traversal vulnerability found with @Rhynorater ☕️
samcurry.net/hacking-starbuc…
Danny retweeted
The smallest sandbox escape for AngularJS, by @PortSwiggerRes
{{{}.")));alert(1)//"}}
And the full (?) list in the cheat sheet: bit.ly/2ADZVhT
Danny retweeted
There’s a lot of buzz right now about a “massive DDoS attack” targeting the US, complete with scary-looking graphs (see Tweet below). While it makes for a good headline in these already dramatic times, it’s not accurate. The reality is far more boring. 1/X xitter.cf/JDaIey/status/12726439…
Danny retweeted
Just finished my first blog post on a AMSI bypass technique utilizing function hooking as well as dll injection x64sec.sh/understanding-and-…
Danny retweeted
This new Microsoft Terminal is very #mimikatz friendly ❤️🥝
Danny retweeted
Making an antivirus engine : the guidelines
adlice.com/making-an-antivir…
Very useful reference to understand basic AV internals!
Danny retweeted
In case you missed @natashenka's talk at @BlackHatEvents this week, here is a video showing a remote exploit for one of the iMessage bugs we found: youtu.be/E_9kBFKNx54 Be sure to read googleprojectzero.blogspot.c… if you are interested in these kinds of attacks!
Danny retweeted
Today, @5aelo and I unrestricted five bugs in iMessage! Here are some highlights:
Danny retweeted
The start of a new series. We will try to learn some basics about browser exploitation. Specifically we will look at JavaScriptCore - the JavaScript engine from WebKit.
liveoverflow.com/getting-int…
Danny retweeted
Project Zero guest blog: "Trashing the Flow of Data" by Stephen Röttger (@_tsuro) - googleprojectzero.blogspot.c…
Danny retweeted
I'm excited to share with you a video collaboration with @herrcore from OALabs about unpacking a self-injection malware. Definitely also checkout their channel if you want to learn more about malware analysis.
liveoverflow.com/unpacking-b…
Danny retweeted
Real World CTF challenge "flaglab" - Two CVEs were combined to achieve full remote code execution on GitLab 11.4.7
Thanks to Patreon/YT Members you can not only watch the video, but alternatively read the write-up here:
liveoverflow.com/gitlab-11-4…
Danny retweeted
A new blog post, bypassing an anti-debug check on Windows without hooking, digging into some internals and musing on where everything has gone wrong :-) tyranidslair.blogspot.com/20…