@mel337__

Security Researcher @Randorisec

 Paris, France
Joined January 2023
  • Tweets14
  • Following416
  • Followers127
We really should be talking about this more....KASLR is just not working properly on Android right now, and it hasn't for a long time. googleprojectzero.blogspot.c…

Defeating KASLR by Doing Nothing at All

IntroductionI’ve recently been researching Pixel kernel exploitation and as part of this research...

projectzero.google
5
57
4
193
63,355
Amel KHAMOUM retweeted
quarkslab@quarkslab14 Oct 2025
From kernel oops to kernel exploit: How two little bugs (CVE-2025-23330, CVE-2025-23280) in #NVIDIA open GPU #Linux driver can lead to full system compromise. Full technical breakdown inside, #vmalloc exploitation technique included! blog.quarkslab.com/nvidia_gp…
1
77
3
253
24,586
Hello, I have a ticket for leHACK. If anyone is interested, please send me a message.
1
204
"Android In-The-Wild: Unexpectedly Excavating a Kernel Exploit" by @__sethJenkins
1
10
81
5,673
Thrilled to announce my new Project Zero blog post is LIVE! 🎉 I detail my knowledge-driven fuzzing process to find sandbox escape vulnerabilities in CoreAudio on MacOS. I'll talk about this and the exploitation process next week @offensive_con! googleprojectzero.blogspot.c…

Breaking the Sound Barrier Part I: Fuzzing CoreAudio with Mach Messages

Guest post by Dillon Franke, Senior Security Engineer, 20% time on Project Zero Every seco...

projectzero.google
5
104
5
369
46,415
Amel KHAMOUM retweeted
Shindan@shindan_io14 Jan 2025
Un article de @t0muxx, chercheur pour @shindan_io , traitant d'Operation Triangulation vient de paraitre dans le dernier @MISCRedac. Voici le synopsis: "La révélation de l'Opération Triangulation par Kaspersky, une attaque dont ils ont été la cible en 2023, a mis en lumière une campagne d'espionnage particulièrement sophistiquée ciblant les appareils iOS. Fait exceptionnel pour ce type de menaces, les échantillons du logiciel espion ont été publiés, ouvrant la voie à une analyse détaillée des techniques de surveillance employées. Cet article se propose d’examiner les traces laissées par ces techniques, notamment l'enregistrement du microphone et la prise d'information de la configuration du téléphone, et les méthodes permettant de les détecter." Vous pouvez acheter le magazine en kiosque ou ici: boutique.ed-diamond.com/nouv…
8
8
986
Amel KHAMOUM retweeted
Jiska@naehrdine17 Nov 2024
How does the new iOS inactivity reboot work? What does it protect from? I reverse engineered the kernel extension and the secure enclave processor, where this feature is implemented. naehrdine.blogspot.com/2024/…
14
166
7
557
54,826
Amel KHAMOUM retweeted
quarkslab@quarkslab8 Oct 2024
Mathieu Farrell (@coiffeur0x90) discovered a dylib injection vulnerability in Microsoft Teams on MacOS. The bug allows an attacker to secretly spy on users through their microphone and camera. Here he explains how he identified and exploited it: blog.quarkslab.com/exploitin…
Mathieu 's pet rat finds vulns but she does not like to do the write up

ALT Mathieu 's pet rat finds vulns but she does not like to do the write up

1
40
98
8,054
Hello, I have a ticket for leHACK. If anyone is interested, please send me a message.
1
1
271
Amel KHAMOUM retweeted
Seth@Set_hyx26 Mar 2024
Replying to @Set_hyx @ericfreyss @Cyber_FR @sekoia_io @evilginx @Viginum_Gouv @volatility @k1nd0ne @CyberByGrout @RandoriSec @felixaime
Les développeurs de @shindan_io ont open sourcé un outil (en Rust ! 🦀) nommé scnr qui permet de prendre des formats hétérogènes et les convertissent au format json. Cette homogénéisation permet de les requêter via jq. L'outil est disponible ici : github.com/shindan-io/scnr

GitHub - shindan-io/scnr: deep file scanner tool

deep file scanner tool. Contribute to shindan-io/scnr development by creating an account on GitHub.

github.com
1
7
9
671
Amel KHAMOUM retweeted
Shindan@shindan_io7 Feb 2024
Happy to share our first blogpost by @t0muxx about Operation triangulation. It gives our results of the keychain module analysis: shindan.io/posts/keychain_mo… #iOS #spyware #mobilesecurity
11
15
1,054
Check out our latest project !!
Shindan@shindan_io31 Jan 2024
🚀Introducing Shindan, your automated smartphone and tablet security analysis solution 📱 🚄 Rapid 🔃 Automated 🤖Simple 🔒Respect for privacy Shindan provides two scores: 1️⃣ IoC - Indicator of Compromission 2️⃣ IoV - Indicator of Vulnerability youtu.be/GbTw9FAzxTg

Shindan - Presentation

Discover Shindan, your automated smartphone and tablet security ana...

youtube.com
2
330
Load more