RME-DisCo research group from University of Zaragoza. Special interest on software and systems security. Link to our Telegram channel: https://xitter.cf/t.co/UmkcXVG8MU

Zaragoza, Spain
Joined January 2016
🚨🚨 Our latest research in @reverseame (joint work with @ailtonTT & E. Feitosa), published in the Int. Journal of Inf. Security, presents an automated approach for detecting BOLA attacks in REST APIs using OpenAPI and Colored Petri Nets. Read it here: rdcu.be/eaP1o
1
1
6
831
reverseame retweeted
Cambio de fecha, será el 17 de diciembre.
Tardes de Ciberseguridad en Huesca. "Seguridad en tus apps desde el inicio". Martes 26/11, 16:00, en @WALQAPT , donde contaremos con la presencia de Rafael Otal Simal, Coordinador de la oficina técnica de seguridad del Gobierno de Aragón diis.unizar.es/es/noticias/t…
1
764
🚀 ¡Únete a la Escuela de Verano en Ciberseguridad 2024 de @INCIBE con @La_UPM! Del 2 al 9 de septiembre. Ponencias de investigadores y expertos, actividades grupales y networking internacional. 🌐🔒 📅 Regístrate antes del 15 de julio: catedraciber.etsisi.upm.es/e… #ciberseguridad
2
6
1
5
1,071
Well, the system is not 100% working... So don't expect tweets in the following days, sorry for that!
Our automatic system for posting tweets is working again, so we will continue posting news of infosec interest here... at least while it works :)
1
2
1,433
🚨🚨Our paper "MOST: A Toolkit to Facilitate Security Auditing of ICS Devices using Modbus/TCP" (collaboration with people from @unicampania) has just been accepted at COSE! ☺️☺️👏👏
1
2
8
1,290
Desde @reverseame @unizar estaremos encantados de poder echar una mano en la resolución del incidente, si lo necesitáis :)
This Post is from an account that no longer exists. Learn more
1
2
996
From a VR student today on our ROP chain lessons. I'm dying 😂: "This week's been like"
19
608
46
2,391
Thx especially to @Razvieu, who was the main designer and organizer of these challenges 👇👇
Our first CTF is over! 👏 Thanks to all the students for participating ❤️. Soon (next month?) we will make a presentation (by the participants too!) to show how to solve the challenges and give the prizes to the 1st&2nd team /cc @catedra_TEF_UZ @EINAunizar @unizar
1
2
7
We are happy to welcome @daniel_uroz as a visitor in our team! Daniel is a PhD student at @reverseame | @unizar with @RicardoJRdez, working on IoT security. During his time with us in Paris, he will integrate our @BinsecTool in his research. Have fun, Daniel! :-)
2
2
13
reverseame retweeted
AvosLocker RaaS operators trying to avoid heat after hitting a US government entity by providing them the decryptor for free.
18
147
37
440
Sooo, @_DarioNisi just rocked the @BlackHatEvents stage ❤️ This project required insane effort, time to hype it up! The gist: there is no single reference implementation for parsing PE files, and there is no comprehensive specs for the PE file format. This leads to problems. 1/n
Looking forward to presenting our work on the PE file format and its software ecosystem, next week at #BHEU. In this work, we modeled the PE parsing/validation routines of different versions of Windows and other security-sensitive tools.
2
11
31
This afternoon I had the luck to do a presentation (in person, yes!) to the @BinsecTool group about @reverseame's work done in recent years in memory forensics, with a fruitful discussion for future joint work. Good ideas to explore ahead }:). Slides here: webdiis.unizar.es/~ricardo/f…
2
18
A #mimikatz 🥝update with - [ms-par] protocol (universal RCE / LPE via TCP RPC) - [ms-rprn] protocol (LPE under certain circumstances via Local RPC) > github.com/gentilkiwi/mimika… Reminder: xitter.cf/gentilkiwi/status/1412… & msrc.microsoft.com/update-gu…
2
22
1
66
My talk about common iOS vulnerabilities at @iOSUkraine was a real success 😊 so many attendees and such a nice feedback ❤️ Slides: speakerdeck.com/julep/common…
6
72
251
The 2021 edition of @IEEESSP starts in a few minutes, looking forward to a great conference! You can find the program at ieee-security.org/TC/SP2021/…, all papers are available via computer.org/csdl/proceeding… #SP21
7
1
10
Registration for WOOT'21 is open hopin.com/events/ieeesp2021. To promote and support young hackers, we're giving out 20 free registrations (made possible thanks to @Qualcomm sponsorship). Apply for a free registration until 05/13 at forms.gle/198XMvZa7KH1bs5V6.
The list of accepted papers for @IEEESSP 2021 is now available at ieee-security.org/TC/SP2021/…, the registration process will start soon #SP21
Our paper on similarity digest algorithms (joint work with M. Martín-Pérez and F. Breitinger) accepted at @DFRWS EU 2021 is finally out! sciencedirect.com/science/ar… we will publish a blog post in @reverseame soon, stay tuned!
2
6
Paper preprints and artifact links are now available for the 2021 NDSS Binary Analysis Research Workshop: bar2021.moyix.net/program.ht…
10
44