@lod108
Joined October 2012
  • Tweets167
  • Following334
  • Followers149
4Media
Found a nice Memory corruption during serialization/deserialization in a soft-TPM used by Hypervisors access.redhat.com/security/c… 🥳
2
Todays santas beamer 💪🏻👍 learn about car protocols !
Niklaus Schiess@_takeshix7 Dec 2020
I wonder if someone will be able to solve all ports of this year's xmas.rip 🤔 Things gonna get pretty wild 😆
3
2
We investigated and found the error. It was connected to a not found tty of the dtls server. Which crashed when accepting connections. Due to dtls it started to send parts of the handshake. Basically docker -it worked but on -d it crashed. Fixed it -dt 😅. Sorry! Running again
This Post is from an account that no longer exists. Learn more
1
💪🏻
Niklaus Schiess@_takeshix1 Dec 2020
It is happening again: Advent Calendar of Advanced Cyber Fun 2020 Edition is live: xmas.rip/ #advent 🥳🥳🤶🧑‍🎄🎅 #xmas featuring. @lod108 @br3zel @sven_to
1
New blog post: Forklift <=3.3.9 and <=3.4 Local Privilege Escalations on macOS (CVE-2020-15349/CVE-2020-27192) insinuator.net/2020/11/forkl…
2
16
1
15
In the last (5th) part of my XPC exploitation series I detail PID reuse attacks, why they are possible and how to solve them. The case study is again F-Secure SAFE. There are some recommended conference talks on the subject at the end. theevilbit.github.io/posts/s…

CVE-2020-14977 - Secure coding XPC Services - Part 5 - PID reuse attacks

In the last post of the series we will see another typical issue, where XPC services using the connecting process's ID (PID) to verify the client instead of the audit token. We will use F-Secure SAFE...

theevilbit.github.io
11
22
Null-Page Allocation.
11
140
6
416
Replying to @ZetaTwo
pwn.py, then wondering why I can’t import pwntools, then mv pwn.py solve.py, then one more minute of wondering why the hell I still cannot import pwntools, then rm pwn.pyc Repeat next CTF
5
5
64
Sourcetrail is now free and open-source! 🥳 The source code is available on GitHub: github.com/CoatiSoftware/Sou… If this catches you by surprise, read our blog post on why we made this change and how we will continue: sourcetrail.com/blog/open_so…
10
163
24
338
Ironically, DMCA notices indexes are way better than traditional search engines to find movies ☠️
24
334
28
1,223
New Blog Post: In-Process Fuzzing With @fridadotre (also featuring Frizzer by @dennismantz and @lod108): bananamafia.dev/post/frida-f… #frida
1
66
191
30 minutes to our talk at @kawaiiconNZ (together with @lod108 ). We also released our frida-based fuzzer to GitHub: github.com/demantz/frizzer

GitHub - demantz/frizzer: Frida-based general purpose fuzzer

Frida-based general purpose fuzzer. Contribute to demantz/frizzer development by creating an account on GitHub.

github.com
6
1
18
Best talk of #TR19 for me was @lod108's automatic vulnerability discovery tool. He demo'ed it on a trustlet from TZ training, so cool! github.com/Traxes/zeno

GitHub - Traxes/zeno: Automatic Vulnerability Discovery

Automatic Vulnerability Discovery. Contribute to Traxes/zeno development by creating an account on GitHub.

github.com
5
1
15
Great Talk by @lod108 on "Architecture-independent vulnerability discovery" using his framework: github.com/Traxes/zeno #tr19 Based on binary ninja

GitHub - Traxes/zeno: Automatic Vulnerability Discovery

Automatic Vulnerability Discovery. Contribute to Traxes/zeno development by creating an account on GitHub.

github.com
3
14
North Korea's latest tablet PC "Ryongaksan" is very similiar to Woolim. It is using the same hardware/software base with slight and more hardening. Interesting to see how their hardening and development process evolves. #DPRK
2
5
Loving the Write-ups from @BenLGardiner gist.github.com/BenGardiner/… and @mindfuckup emanuelduss.ch/2018/12/adven… Booth Write-ups show exactly what we wanted to achieve :) Some minimal coding and learning weird Stuff. Was definitely worth it. Thanks to everyone Playing. Merry XMAS2018 ;-)

Advent Calendar of Advanced Cyber Fun 2018 Writeup

Advent Calendar of Advanced Cyber Fun 2018 Writeup - Advent Calendar of Advanced Cyber Fun 2018 Writeup.md

gist.github.com
1
10
18
My Advent Calendar of Advanced Cyber Fun 2018 Write-Up: emanuelduss.ch/2018/12/adven… /cc @_takeshix @lod108
1
3
5
Kudos to @BenLGardiner for solving all 24 xmas.rip ports first! 🥳 Christmas presents have been sent out. He also published a writeup with solutions for all 24 ports and the voucher challenges, you should check it out! gist.github.com/BenGardiner/… #advent
1
4
1
9
And here is the repository with all the code and configs for the Advent Calendar of Advanced Cyber Fun 2018: github.com/takeshixx/advent-… Thanks everyone for participating! #advent #Docker #fun

GitHub - takeshixx/advent-calendar-2018: A technical advent calendar with CTF-like services where a...

A technical advent calendar with CTF-like services where a new port opens every day. - takeshixx/advent-calendar-2018

github.com
21
31
Replying to @OOffsec
@OOffsec @ayomawdb Here's the section that details the RSA partial key exposure from my writeup on the xmas.rip challenge. gist.github.com/BenGardiner/… Thank you @_takeshix and @lod108 for all the fun!
⏢Ben Gardiner (he/him)@BenLGardiner16 Dec 2018
Replying to @_takeshix
@_takeshix @lod108 Sorry to be the Grinch on your xmas.rip but... you setup a partial RSA key exposure and I sniped the voucher ahead of port 24 ;) #merryxmastome
4
5
Load more